CVEvulnerability
CVE-2008-2204
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters.
Affected configurations
• maianscriptworld maian search 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://securityreason.com/securityalert/3883 securityreason.com
- http://www.securityfocus.com/archive/1/491586/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29032 www.securityfocus.com
- http://securityreason.com/securityalert/3883 securityreason.com
- http://www.securityfocus.com/archive/1/491586/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29032 www.securityfocus.com