VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 30, 2008· Updated Jun 16, 2026

CVE-2008-2035

CVE-2008-2035

Description

Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Bluemoon/Backpackllm-fuzzy2 versions
    <=0.91+ 1 more
    • (no CPE)range: <=0.91
    • cpe:2.3:a:bluemoon:backpack:*:*:*:*:*:*:*:*range: <=0.91
  • Bluemoon/Newbb Fileupllm-fuzzy2 versions
    <=1.83+ 1 more
    • (no CPE)range: <=1.83
    • cpe:2.3:a:bluemoon:newbb_fileup:*:*:*:*:*:*:*:*range: <=1.83
  • Bluemoon/Bmsurveyllm-fuzzy2 versions
    <=0.84+ 1 more
    • (no CPE)range: <=0.84
    • cpe:2.3:a:bluemoon:bmsurvey:*:*:*:*:*:*:*:*range: <=0.84
  • Bluemoon/News_embedllm-create
    Range: <=1.44
  • Bluemoon/Popnupblogllm-fuzzy2 versions
    <=3.19+ 1 more
    • (no CPE)range: <=3.19
    • cpe:2.3:a:bluemoon:popnupblog:*:*:*:*:*:*:*:*range: <=3.19
  • Bluemoon/News Fileup
    cpe:2.3:a:bluemoon:news_fileup:*:*:*:*:*:*:*:*
    Range: <=1.44
  • XOOPS/Xoops
    cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*
  • XOOPS/Xoops Cube
    cpe:2.3:a:xoops:xoops_cube:2.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.