CVE-2008-2445 Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the u...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wgcc web group communication center | = 1.0.3-prerelease1 | No fix listed |
References
- 30235 third-party-advisory vendor-advisory
- 29188 exploit vdb-entry
- wgcc-profile-xss(42383) vdb-entry
- 5606 exploit