CVE-2008-6631

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than CVE-2008-0679.

Link	Resource
http://secunia.com/advisories/30165	Vendor Advisory
http://www.securityfocus.com/bid/29133	Exploit
http://www.davidsopas.com/soapbox/blogphp.txt	Exploit
http://osvdb.org/45038
https://exchange.xforce.ibmcloud.com/vulnerabilities/42370
https://exchange.xforce.ibmcloud.com/vulnerabilities/42369

Configuration 1

cpe:2.3:a:blogphp:blogphp:2.0:*:*:*:*:*:*:*

---

Published : 2009-04-07 02:17

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6631

Mitre link : CVE-2008-6631

Blogphp

CWE-79