CVE-2008-3237

2008-07-2116:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

JSON

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter.

References

secunia.com/advisories/31084

securityreason.com/securityalert/4015

www.securityfocus.com/bid/30215

www.vupen.com/english/advisories/2008/2107/references

exchange.xforce.ibmcloud.com/vulnerabilities/43758

www.exploit-db.com/exploits/6069