CVE-2008-6359 Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpf1 maxs guestbook | All versions | No fix listed |
References
- 50654 vdb-entry
- packetstormsecurity.org
- 33106 third-party-advisory vendor-advisory
- 18595 exploit
- 20081210 Max's Guestbook (XSS) Remote Vulnerability mailing-list
- 32763 vdb-entry
- 52471 vdb-entry
- maxsguestbook-index-xss(47250) vdb-entry
- maxguestbook-name-xss(74011) vdb-entry