CVE-2008-6386

2009-03-0219:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.1%

JSON

Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References

packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt

www.securityfocus.com/bid/32598

exchange.xforce.ibmcloud.com/vulnerabilities/47028