CVE-2008-0258 Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php running management phprunman | <= 1.0.2 | No fix listed |
References
- 28474 patch third-party-advisory vendor-advisory
- sourceforge.net patch
- sourceforge.net exploit
- 27268 exploit patch vdb-entry
- phprunningmanagement-index-xss(39639) vdb-entry