CVE-2008-4053

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.45%

Published

Sep 11, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBBluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) cat_id, and (3) view parameters.

Weaknesses (CWE)

CWE-79

Affected Products (3)

bluemoon · popnupblogvulnerable

xoops · xoops

References (8)

http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html

Exploit

http://secunia.com/advisories/31625

http://www.securityfocus.com/bid/30827

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/44680

http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html

Exploit

http://secunia.com/advisories/31625

http://www.securityfocus.com/bid/30827

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/44680

KEV Catalog EPSS Scores Vendors All CVEs