CVE-2008-2677 Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| telephone directory 2008 | All versions | No fix listed |
References
- 29614 vdb-entry
- telephonedirectory2008-edit1-xss(42972) vdb-entry
- 5764 exploit