CVE-2008-7036

Published: Aug 24, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) direction and (2) order_by parameters.

Affected (13)

Products: E Xoops: E Xoops · Bcoos: Devtracker, Bcoos

1 product

2 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
E Xoops E Xoops	Up to 1.08
E Xoops E Xoops	Version 1.05 r3
E Xoops E Xoops	Version 1.05 rev1
E Xoops E Xoops	Version 1.05 rev2
E Xoops E Xoops	Version 1.05 rev3
Bcoos Devtracker	Version 0.20

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Bcoos Devtracker	Version 3.0
Bcoos Bcoos	Up to 1.1.11
Bcoos Bcoos	Version 1.0.10
Bcoos Bcoos	Version 1.0.11
Bcoos Bcoos	Version 1.0.12
Bcoos Bcoos	Version 1.0.13
Bcoos Bcoos	Version 1.0.9