CVE-2008-4893

LOW 2.6CVE-2008-4893 · Published 04/11/2008 · updated 16/06/2026

In short

CVE-2008-4893 is a LOW (CVSS 2.6) vulnerability affecting tribiq cms (tribiq).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tribiq cms tribiq	`= 5.0.10a`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the template_path parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/32548 · Vendor Advisory
securityfocus.com/bid/32050
exchange.xforce.ibmcloud.com/vulnerabilities/46265

More vulnerabilities in tribiq cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tribiq cms

tribiq

= 5.0.10a

No fix yet

Description

More vulnerabilities in tribiq cms

See all →