Skip to content

CVE-2008-5067 Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this informati...

MediumCVSS 4.3 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known

Description

Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

ProductAffected versionsFixed in
kkeim kmita catalogue = 2.0 No fix listed

References

  • 32457 third-party-advisory vendor-advisory
  • 49441 vdb-entry
  • 31968 exploit vdb-entry