Unrated severityNVD Advisory· Published Apr 8, 2009· Updated Apr 23, 2026
CVE-2008-6675
CVE-2008-6675
Description
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp.
Affected products
1- cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.bugreport.ir/39/exploit.htmnvdExploit
- www.bugreport.ir/index_39.htmnvdExploit
- secunia.com/advisories/30501nvdVendor Advisory
- osvdb.org/46221nvd
- www.securityfocus.com/bid/29524nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42860nvd
News mentions
0No linked articles in our index yet.