Cross-Site Scripting Vulnerability in XOOPS Modules by Bluemoon, Inc.
CVE-2008-2035

Currently unrated

Key Information:

Vendor: Xoops
Status: Xoops Cube; Popnupblog; Newbb Fileup; Backpack
Vendor: CVE Published:; 30 April 2008

What is CVE-2008-2035?

A cross-site scripting vulnerability exists in the Bluemoon, Inc. XOOPS modules, allowing remote attackers to inject arbitrary web scripts or HTML. This vulnerability affects multiple modules including BackPack, BmSurvey, newbb_fileup, News_embed, and PopnupBlog across various versions. Attackers can exploit this due to unspecified vectors, leading to potential unauthorized actions or data exposure. Users of these products should consider applying security measures or migrating to safer alternatives.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch