VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 30, 2008· Updated Jun 16, 2026

CVE-2008-2035

CVE-2008-2035

Description

Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Bluemoon/Backpack2 versions
    cpe:2.3:a:bluemoon:backpack:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bluemoon:backpack:*:*:*:*:*:*:*:*range: <=0.91
    • (no CPE)range: <=0.91
  • Bluemoon/Bmsurvey2 versions
    cpe:2.3:a:bluemoon:bmsurvey:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bluemoon:bmsurvey:*:*:*:*:*:*:*:*range: <=0.84
    • (no CPE)range: <=0.84
  • Bluemoon/Newbb Fileup2 versions
    cpe:2.3:a:bluemoon:newbb_fileup:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bluemoon:newbb_fileup:*:*:*:*:*:*:*:*range: <=1.83
    • (no CPE)range: <=1.83
  • Bluemoon/News Fileup
    cpe:2.3:a:bluemoon:news_fileup:*:*:*:*:*:*:*:*
    Range: <=1.44
  • Bluemoon/Popnupblog2 versions
    cpe:2.3:a:bluemoon:popnupblog:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bluemoon:popnupblog:*:*:*:*:*:*:*:*range: <=3.19
    • (no CPE)range: <=3.19
  • XOOPS/Xoops
    cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*
  • XOOPS/Xoops Cube
    cpe:2.3:a:xoops:xoops_cube:2.1:*:*:*:*:*:*:*
  • Bluemoon, Inc./News_embedllm-create
    Range: <=1.44

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.