CVE-2008-2694

Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2008-2694

CVE-2008-2694 affects phpInv 0.8.0, with a vulnerability in the search.php keyword parameter that enables cross-site scripting (XSS). The root cause is improper handling of user input in the search functionality, allowing an attacker to inject arbitrary web script or HTML when the keyword paramet...