Skip to content

CVE-2008-0679 Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

MediumCVSS 4.3 EPSS 1.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected products

ProductAffected versionsFixed in
blogphp = 2.0 No fix listed

References

  • 28756 third-party-advisory vendor-advisory
  • 27591 vdb-entry
  • 5042 exploit