Lucene search
+L

2 matches found

CVE
CVE
•added 2008/10/03 10:00 p.m.•58 views

CVE-2008-4424

CVE-2008-4424 is a cross-site scripting (XSS) vulnerability in Domain Group Network GooCMS 1.02 (index.php) where the s parameter in the comments action can inject arbitrary script/HTML. Root cause: insufficient input sanitization of the s parameter. Impact: remote attackers can trigger XSS in vi...

4.3CVSS5.5AI score0.01462EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/03 12:00 a.m.•3 views

CVE-2008-4424: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web script or HTML via the s parameter in a comments action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.3CVSS6AI score0.01462EPSS
SaveExploits1References2
Rows per page
Query Builder