Lucene search
HistoryFeb 12, 2008 - 1:00 a.m.
CVE-2008-0679
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
59.2%
Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected configurations
Node
blogphpblogphpMatch2.0
Related
cvelist
cvelist
CVE-2008-0679
2008-02-12 00:00:00
CVE-2008-6631
2009-04-07 10:00:00
prion
prion
Cross site scripting
2008-02-12 01:00:00
Cross site scripting
2009-04-07 14:17:00
cve
cve
CVE-2008-0679
2008-02-12 01:00:00
CVE-2008-6631
2009-04-07 14:17:17
exploitdb
exploitdb
BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection
2008-02-02 00:00:00
nvd
nvd
CVE-2008-6631
2009-04-07 14:17:17
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
59.2%
Related for NVD:CVE-2008-0679