CVE-2008-0877 - CVE House
Back to Database
Status published Medium CVE-2008-0877

Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) frontend, (2) set_frontend, (3) jz_path, (4) theme, and (5) set_theme parameters to (a) index.php; the frontend, theme, and (6) language parameters to (b) ajax_request.php; the jz_path parameter to (c) slim.php; the frontend, theme, and jz_path parameters to (d) popup.php; the (13) PATH_INFO to index.php and (e) slim.php; and the (14) query parameter in a playlistedit action and (15) siteNewsData parameter in a sitenews action to (f) popup.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0877

Credits & Attribution

No credits recorded in the NVD database.

References

More from jinzora

View All →
CVE-2009-2313
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8...
High 7.5
CVE-2006-7131
PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6...
Critical 10
CVE-2006-7130
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1...
High 7.5
CVE-2006-6770
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox...
Medium 6.8
CVE-2005-2249
Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and...
Critical 10

Affected Vendor

Affected Software

media jukebox
Vulnerable Versions:
2.7.5

Timeline

Official Publish: February 21st, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.