CVE-2008-3782

LOW 3.5CVE-2008-3782 · Published 26/08/2008 · updated 16/06/2026

In short

CVE-2008-3782 is a LOW (CVSS 3.5) vulnerability affecting acg ptp (discountedscripts).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 58.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
acg ptp discountedscripts	`= 1.0.6`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Category name field under Advertisement Packages, the (2) Reason field under Credit/Debit Users, and the (3) FAQ question and (4) FAQ answer fields under Add New FAQ Entry.

References

lists.grok.org.uk/pipermail/full-disclosure/2008-August/064038.html
secunia.com/advisories/31591 · Vendor Advisory
securityfocus.com/bid/30793
exchange.xforce.ibmcloud.com/vulnerabilities/44603

More vulnerabilities in acg ptp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free