CVE-2008-0186 Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to C...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phprisk netrisk | <= 1.9.7 | No fix listed |
References
- 28369 third-party-advisory
- 20080106 netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss) mailing-list
- 27161 vdb-entry
- 4852 exploit