CVEvulnerability
CVE-2008-0092
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected configurations
• phpwebsite phpwebsite 1.4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://phpwebsite.appstate.edu/blog/2143 phpwebsite.appstate.edu
- http://secunia.com/advisories/28303 secunia.com
- http://securityreason.com/securityalert/3511 securityreason.com
- http://www.securityfocus.com/archive/1/485704/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27090 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39391 exchange.xforce.ibmcloud.com
- http://phpwebsite.appstate.edu/blog/2143 phpwebsite.appstate.edu
- http://secunia.com/advisories/28303 secunia.com
- http://securityreason.com/securityalert/3511 securityreason.com
- http://www.securityfocus.com/archive/1/485704/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27090 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39391 exchange.xforce.ibmcloud.com