CVE-2008-7223: Linpha

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php.

Affected products

• Linpha Linpha: up to and including 1.3.2; version 0.9.0 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9.4 only; …

Published 2009-09-14. Last modified 2026-06-16.