CVE-2008-2035

MEDIUM 4.3CVE-2008-2035 · Published 30/04/2008 · updated 16/06/2026

In short

CVE-2008-2035 is a MEDIUM (CVSS 4.3) vulnerability affecting backpack (bluemoon), bmsurvey (bluemoon), newbb fileup (bluemoon).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
backpack bluemoon	`≤ 0.91`	No fix yet
bmsurvey bluemoon	`≤ 0.84`	No fix yet
newbb fileup bluemoon	`≤ 1.83`	No fix yet
news fileup bluemoon	`≤ 1.44`	No fix yet
popnupblog bluemoon	`≤ 3.19`	No fix yet
xoops xoops	`= 2.0`	No fix yet
xoops cube xoops	`= 2.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free