CVE-2008-2187 Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly i...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly involving interface/redirect.htm.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mdsjack mjguest | = 6.7-gt_rev1 | No fix listed |
References
- 30049 third-party-advisory vendor-advisory
- 3872 third-party-advisory
- www.mdsjack.bo.it
- 20080501 mjguest 6.7 (ALL VERSION) Xss & Redirection Vuln mailing-list
- 20080521 Re: mjguest 6.7 (ALL VERSION) Xss & Redirection Vuln mailing-list
- 29002 exploit vdb-entry
- mjguest-mjguest-xss(42129) vdb-entry