← Database

CVE-2008-4535

MEDIUM CVSS: 4.3 Published: 2008-10-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE Community Edition Nighly-Build r17623 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4536 and CVE-2008-4537.

Affected Platforms

Ec-Cube Ec-Cube

Weakness Type

CWE-79

References