CVE-2008-2035
Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| xoops / xoops_cube | 2.1 | 2.1.x |
| bluemoon / popnupblog | - | 3.19.x |
| bluemoon / newbb_fileup | - | 1.83.x |
| bluemoon / backpack | - | 0.91.x |
| bluemoon / news_fileup | - | 1.44.x |
| xoops / xoops | 2.0 | 2.0.x |
| bluemoon / bmsurvey | - | 0.84.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime