CVEvulnerability
CVE-2008-6359
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.
Affected configurations
• phpf1 max\'s guestbook
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/50654 osvdb.org
- http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html packetstormsecurity.org
- http://secunia.com/advisories/33106 Vendor Advisory
- http://www.exploit-db.com/exploits/18595 www.exploit-db.com
- http://www.securityfocus.com/archive/1/499099/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32763 www.securityfocus.com
- http://www.securityfocus.com/bid/52471 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47250 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74011 exchange.xforce.ibmcloud.com
- http://osvdb.org/50654 osvdb.org
- http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html packetstormsecurity.org
- http://secunia.com/advisories/33106 Vendor Advisory
- http://www.exploit-db.com/exploits/18595 www.exploit-db.com
- http://www.securityfocus.com/archive/1/499099/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32763 www.securityfocus.com
- http://www.securityfocus.com/bid/52471 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47250 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74011 exchange.xforce.ibmcloud.com