{"id":"CVE-2008-1300","aliases":[],"url":"https://o3.security/vulnerability/CVE-2008-1300","summary":"Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and…","details":"Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045.","published":"2008-03-12T17:44:00.000","modified":"2026-06-16T22:51:27.237","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":2,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/29278"},{"type":"WEB","url":"http://securityreason.com/securityalert/3731"},{"type":"WEB","url":"http://www.securityfocus.com/archive/1/489291/100/0/threaded"},{"type":"EXPLOIT","url":"http://www.securityfocus.com/bid/28152"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41095"},{"type":"ADVISORY","url":"http://secunia.com/advisories/29278"},{"type":"WEB","url":"http://securityreason.com/securityalert/3731"},{"type":"WEB","url":"http://www.securityfocus.com/archive/1/489291/100/0/threaded"},{"type":"EXPLOIT","url":"http://www.securityfocus.com/bid/28152"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41095"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-16T22:51:27.237"}}