CVE-2008-2994 Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) an...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (2) by and (3) cat_id parameters to annuaire.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpeasydata | = 1.5.4 | No fix listed |
References
- 3969 third-party-advisory
- 20080610 PHPEasyData 1.5.4 Multiple Vulnerabilities mailing-list
- 29659 exploit vdb-entry
- phpeasydata-lastrecords-annuaire-xss(42997) vdb-entry