CVE-2008-6359

Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.

Link	Resource
http://secunia.com/advisories/33106	Vendor Advisory
http://www.securityfocus.com/bid/32763
http://osvdb.org/50654
https://exchange.xforce.ibmcloud.com/vulnerabilities/47250
https://exchange.xforce.ibmcloud.com/vulnerabilities/74011
http://www.securityfocus.com/bid/52471
http://www.exploit-db.com/exploits/18595
http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html
http://www.securityfocus.com/archive/1/499099/100/0/threaded

Configuration 1

cpe:2.3:a:phpf1:max's_guestbook:-:*:*:*:*:*:*:*

---

Published : 2009-03-02 04:30

Updated : 2018-10-11 08:57

---

NVD link : CVE-2008-6359

Mitre link : CVE-2008-6359

No products.

CWE-79