CVE-2008-3448

Summary

Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/30485
• http://www.securityfocus.com/archive/1/494971/100/0/threaded
• http://securityreason.com/securityalert/4102
• http://secunia.com/advisories/31359
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44180
• http://www.securityfocus.com/archive/1/496788/100/0/threaded

References

• http://www.securityfocus.com/bid/30485
• http://www.securityfocus.com/archive/1/494971/100/0/threaded
• http://securityreason.com/securityalert/4102
• http://secunia.com/advisories/31359
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44180
• http://www.securityfocus.com/archive/1/496788/100/0/threaded

• ←Previous
• Next→