CVE-2008-2680

MEDIUM 4.3CVE-2008-2680 · Published 12/06/2008 · updated 16/06/2026

In short

CVE-2008-2680 is a MEDIUM (CVSS 4.3) vulnerability affecting realm cms (realm project).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
realm cms realm_project	`≤ 2.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut parameters.

References

bugreport.ir/index.php · Exploit
secunia.com/advisories/30583 · Vendor Advisory
securityfocus.com/bid/29616
exchange.xforce.ibmcloud.com/vulnerabilities/42953
exploit-db.com/exploits/5766

More vulnerabilities in realm cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free