Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via (1) the fn parameter during a dload action, (2) the mask parameter during a search action, and (3) the tab parameter during a sysinfo action.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2008-10-06T19:00:00
Updated: 2024-08-07T10:17:09.765Z
Reserved: 2008-10-06T00:00:00
Link: CVE-2008-4447
Vulnrichment
No data.
NVD
Status : Modified
Published: 2008-10-06T19:56:52.940
Modified: 2024-11-21T00:51:41.950
Link: CVE-2008-4447
Redhat
No data.