CVE-2008-2563

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-06 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) dsp_main.php and (2) dsp_task_editor.php in SamTodo 1.1 allow remote attackers to inject arbitrary web script or HTML via the (a) tid parameter in a main.taskeditor edit action, and the (b) completed parameter in a main.default action, to index.php.

Affected products

Samtodo: 1.1

References

http://secunia.com/advisories/30557
http://www.davidsopas.com/soapbox/samtodo.txt
http://www.securityfocus.com/bid/29568
http://www.securityfocus.com/bid/29569
https://exchange.xforce.ibmcloud.com/vulnerabilities/42868
http://secunia.com/advisories/30557
http://www.davidsopas.com/soapbox/samtodo.txt
http://www.securityfocus.com/bid/29568
http://www.securityfocus.com/bid/29569
https://exchange.xforce.ibmcloud.com/vulnerabilities/42868

Get alerted when CVE-2008-2563 or the next vulnerability affects your stack