Security Advisory

CVE-2008-3397

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-07-31 16:00:00
Last updated 2025-04-03 13:42:26
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote attackers to inject arbitrary web script or HTML via a cerberus_user cookie.