CVE-2008-2566 Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2)....
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php-address book | <= 3.1.5 | No fix listed |
References
- packetstormsecurity.com exploit
- 30540 third-party-advisory vendor-advisory
- phpaddressbook-group-xss(42856) vdb-entry
- phpaddressbook-grouppara-xss(99624) vdb-entry
- 5739 exploit