CVE-2008-3448

CVE-2008-3448 describes a cross-site scripting (XSS) vulnerability in the web application feature: index.php in the product “csphonebook 1.02” from common solutions . The issue arises when an attacker supplies a crafted value in the letter parameter, allowing injection of arbitrary web script or ...