CVE-2008-5193 Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might o...
MediumCVSS 4.3
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| philboard | = 1.2 | No fix listed |
| philboard | = 1.14 | No fix listed |
References
- 30874 third-party-advisory vendor-advisory
- 4621 third-party-advisory
- 29998 vdb-entry
- philboard-search-xss(43451) vdb-entry
- 5958 exploit