CVE-2008-2335 Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of...
MediumCVSS 4.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is also affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vastal phpvid | = 1.1 | No fix listed |
| vastal phpvid | = 1.2 | No fix listed |
References
- holisticinfosec.org
- 45171 vdb-entry
- packetstormsecurity.com
- packetstormsecurity.com exploit
- 20150310 Vastal I-tech phpVID 1.2.3 Multiple XSS (Cross-site Scripting) Security Vulnerabilities exploit mailing-list
- 30152 third-party-advisory vendor-advisory
- tetraph.com
- 27519 exploit
- 29238 vdb-entry
- ADV-2008-2552 vdb-entry
- phpvid-query-xss(42450) vdb-entry
- 6422 exploit