CVE-2008-3782 - CVE House
Back to Database
Status published Low CVE-2008-3782

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Category name field under Advertisement Packages, the (2) Reason field under Credit/Debit Users, and the (3) FAQ question and (4) FAQ answer fields under Add New FAQ Entry.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3782

Credits & Attribution

No credits recorded in the NVD database.

References

More from discountedscripts

View All →
CVE-2008-4144
SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop...
High 7.5
CVE-2008-3944
SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote...
High 7.5
CVE-2008-3765
SQL injection vulnerability in code.php in Quick Poll Script allows...
High 7.5

Affected Vendor

discountedscripts

View all reports →

Affected Software

acg ptp
Vulnerable Versions:
1.0.6

Timeline

Official Publish: August 26th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.