CVE-2008-6027

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-6027
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/31968 Not Applicable
http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 Broken Link
http://www.securityfocus.com/archive/1/496582/100/0/threaded Broken Link
http://www.securityfocus.com/bid/31312 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/45321 Third Party Advisory
http://secunia.com/advisories/31968 Not Applicable
http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 Broken Link
http://www.securityfocus.com/archive/1/496582/100/0/threaded Broken Link
http://www.securityfocus.com/bid/31312 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/45321 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:iss-oberlausitz:bluepage_cms:*:*:*:*:*:*:*:*
History

23 Mar 2026, 16:35

Type Values Removed Values Added
CPE cpe:2.3:a:bluepage:bluepage_cms:*:*:*:*:*:*:*:*
cpe:2.3:a:bluepage:bluepage_cms:2.4.0:*:*:*:*:*:*:*		 cpe:2.3:a:iss-oberlausitz:bluepage_cms:*:*:*:*:*:*:*:*
First Time Iss-oberlausitz
Iss-oberlausitz bluepage Cms
References () http://secunia.com/advisories/31968 - () http://secunia.com/advisories/31968 - Not Applicable
References () http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - Exploit () http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - Broken Link
References () http://www.securityfocus.com/archive/1/496582/100/0/threaded - () http://www.securityfocus.com/archive/1/496582/100/0/threaded - Broken Link
References () http://www.securityfocus.com/bid/31312 - () http://www.securityfocus.com/bid/31312 - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/45321 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/45321 - Third Party Advisory

21 Nov 2024, 00:55

Type Values Removed Values Added
References () http://secunia.com/advisories/31968 - () http://secunia.com/advisories/31968 -
References () http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - Exploit () http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - Exploit
References () http://www.securityfocus.com/archive/1/496582/100/0/threaded - () http://www.securityfocus.com/archive/1/496582/100/0/threaded -
References () http://www.securityfocus.com/bid/31312 - () http://www.securityfocus.com/bid/31312 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/45321 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/45321 -
Information

Published : 2009-02-03 11:30

Updated : 2026-03-23 16:35

NVD link : CVE-2008-6027

Mitre link : CVE-2008-6027

CVE.ORG link : CVE-2008-6027

JSON object : View

Products Affected

iss-oberlausitz

  • bluepage_cms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')