VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 24, 2009· Updated Apr 23, 2026

CVE-2008-7036

CVE-2008-7036

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) direction and (2) order_by parameters.

Affected products

13
  • E Xoops/E Xoops5 versions
    cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*range: <=1.08
    • cpe:2.3:a:e-xoops:e-xoops:1.05:r3:*:*:*:*:*:*
    • cpe:2.3:a:e-xoops:e-xoops:1.05:rev1:*:*:*:*:*:*
    • cpe:2.3:a:e-xoops:e-xoops:1.05:rev2:*:*:*:*:*:*
    • cpe:2.3:a:e-xoops:e-xoops:1.05:rev3:*:*:*:*:*:*
  • Bcoos/Devtracker2 versions
    cpe:2.3:a:bcoos:devtracker:0.20:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bcoos:devtracker:0.20:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:devtracker:3.0:*:*:*:*:*:*:*
  • Bcoos/Bcoos6 versions
    cpe:2.3:a:bcoos:bcoos:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:bcoos:bcoos:*:*:*:*:*:*:*:*range: <=1.1.11
    • cpe:2.3:a:bcoos:bcoos:1.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.13:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.