Cross site scripting

2009-03-0216:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Max’s Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.

References

osvdb.org/50654

packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html

secunia.com/advisories/33106

www.securityfocus.com/archive/1/499099/100/0/threaded

www.securityfocus.com/bid/32763

www.securityfocus.com/bid/52471

exchange.xforce.ibmcloud.com/vulnerabilities/47250

exchange.xforce.ibmcloud.com/vulnerabilities/74011

www.exploit-db.com/exploits/18595