CVE-2008-2984: Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remo...

Security readout for executives and security teams

CMReams CMS 1.3.1.1 Beta 2 has a cross-site scripting issue in a backend page. An attacker could inject script or HTML through a language-related parameter. The source bundle does not provide severity, CVSS, vendor fix details, or evidence of active exploitation. Exposure is limited to environments still running CMReams CMS 1.3.1.1 Beta 2 with backend/umleitung.php reachable. The bundle lists no CPEs, no vendor inventory hints, and no affected versions beyond this beta release, so confirm exposure from asset records and application files. Prioritize confirming whether this old beta CMS exists in production or externally reachable environments. If present, remediation should focus on retirement, access restriction, or vendor-guided replacement. Urgency increases if the backend is internet-accessible or used by privileged staff. Mitigation focus: Check vendor or maintainer guidance for a fixed release or supported migration path.; Remove or restrict access to CMReams backend paths if the application remains in use.; Retire CMReams CMS 1.3.1.1 Beta 2 where business ownership is unclear..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.