VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 2, 2008· Updated Jun 16, 2026

CVE-2008-2980

CVE-2008-2980

Description

Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) error_meldung parameter to admin/features/register/register.php, the (2) feature_language[ueberschrift] parameter to admin/features/memberlist/memberlist.php, the (3) language_array[ueberschrift] parameter to admin/features/lostpassword/lostpassword.php, the (4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] parameter to admin/features/fotogalerie/eingabe.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Homeph Design/Homeph Design2 versions
    cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*
    • (no CPE)range: = 2.10 RC2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.