CVE-2008-2508 Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML via the "nb" parameter in voir mode.
MediumCVSS 4.3
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML via the "nb" parameter in voir mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tr script news | = 2.1 | No fix listed |
References
- 29388 exploit vdb-entry
- www.z0rlu.ownspace.org exploit
- trscriptnews-news-xss(42648) vdb-entry