CVE-2008-5933

no score yetEPSS 1.5%

Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the strcerca parameter (aka the input field for the cerca action) or (2) the id_oggetto parameter. NOTE: some of these details are obtained from third party information.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-01-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cmsisweb:cms_isweb

References

http://secunia.com/advisories/33090
http://securityreason.com/securityalert/4933
http://www.securityfocus.com/bid/32823
https://www.exploit-db.com/exploits/7465
http://secunia.com/advisories/33090

Check your stack JSON