Unrated severityNVD Advisory· Published Apr 8, 2009· Updated Jun 16, 2026
CVE-2008-6675
CVE-2008-6675
Description
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*
- (no CPE)range: = 1.8.5
Patches
Vulnerability mechanics
References
6- www.bugreport.ir/39/exploit.htmnvdExploit
- www.bugreport.ir/index_39.htmnvdExploit
- secunia.com/advisories/30501nvdVendor Advisory
- osvdb.org/46221nvd
- www.securityfocus.com/bid/29524nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42860nvd
News mentions
0No linked articles in our index yet.