CVE-2008-6359

2009-03-0216:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Max’s Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.

References

osvdb.org/50654

packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html

secunia.com/advisories/33106

www.exploit-db.com/exploits/18595

www.securityfocus.com/archive/1/499099/100/0/threaded

www.securityfocus.com/bid/32763

www.securityfocus.com/bid/52471

exchange.xforce.ibmcloud.com/vulnerabilities/47250

exchange.xforce.ibmcloud.com/vulnerabilities/74011