Unrated severityNVD Advisory· Published Feb 3, 2009· Updated Jun 16, 2026

CVE-2008-6027

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.

Affected products

Iss Oberlausitz/Bluepage CMS
cpe:2.3:a:iss-oberlausitz:bluepage_cms:*:*:*:*:*:*:*:*
Range: <2.5.8
BluePage/CMSllm-create
Range: <=2.5

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/45321nvdThird Party Advisory
secunia.com/advisories/31968nvdNot Applicable
www.majorsecurity.de/index_2.phpnvdBroken Link
www.securityfocus.com/archive/1/496582/100/0/threadednvdBroken Link
www.securityfocus.com/bid/31312nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000