CVE-2008-6945

MEDIUM 4.3CVE-2008-6945 · Published 12/08/2009 · updated 16/06/2026

In short

CVE-2008-6945 is a MEDIUM (CVSS 4.3) vulnerability affecting interchange (icdevgroup).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
interchange icdevgroup	`= 5.4.0= 5.4.1= 5.4.2= 5.6.0= 5.7.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature.

References

ftp.icdevgroup.org/interchange/5.7/WHATSNEW · Vendor Advisory
osvdb.org/49852
osvdb.org/49853
secunia.com/advisories/32658 · Vendor Advisory
icdevgroup.org/i/dev/news · Patch
securityfocus.com/bid/32297
exchange.xforce.ibmcloud.com/vulnerabilities/46598
exchange.xforce.ibmcloud.com/vulnerabilities/46599

More vulnerabilities in interchange

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free