CVE-2008-3678

Freeway <1.4.2.197 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL.

References (4)

[Vendor Advisory] http://secunia.com/advisories/31475

[Product] http://sourceforge.net/project/shownotes.php?release_id=619467

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/30676

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/44427

Scores

EPSS 0.0029

EPSS Percentile 51.6%

Classification

CWE

CWE-79

Status draft

Affected Products (9)

damian_hickey/freeway

Timeline

Published Aug 14, 2008

Tracked Since Feb 18, 2026