CVE-2008-6435: Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject...

Security readout for executives and security teams

This is an old cross-site scripting issue in phpSQLiteCMS 1 RC2. A remote attacker could make the application render attacker-controlled script or HTML through certain language parameters, potentially affecting users who visit crafted pages. The sources do not provide a CVSS score, affected CPEs, or a named vendor patch. Exposure is likely limited to legacy websites still running phpSQLiteCMS 1 RC2. Internet-facing CMS, login, or administration pages would be the main concern. The official affected-product metadata is incomplete, so asset validation is required before assuming exposure. Prioritize this for legacy-application cleanup, not emergency response. It matters if phpSQLiteCMS 1 RC2 is still exposed, especially around login or admin pages. The absence of KEV and missing severity data reduce urgency, but unsupported software should not remain internet-facing. Mitigation focus: Check whether any site still runs phpSQLiteCMS 1 RC2.; Review vendor or project guidance for any historical fix or upgrade path.; Retire or replace unsupported phpSQLiteCMS deployments where feasible..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.