CVE-2008-6004 Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aj square aj auction | = 2.0 | No fix listed |
References
- ajauctionpro-search-xss(45431) vdb-entry
- 6561 exploit