CVE-2008-1228 Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitrary web script or HTML via the list parameter in an import action.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitrary web script or HTML via the list parameter in an import action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| minigal mg2 | All versions | No fix listed |
References
- 20080304 Minigal 2 critical XSS mailing-list
- 28098 exploit vdb-entry