CVE-2008-2566
Php-address Book < 3.1.5 - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5739
References (5)
Scores
EPSS
0.0453
EPSS Percentile
89.0%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
php-address_book/php-address_book
< 3.1.5
Timeline
Published
Jun 06, 2008
Tracked Since
Feb 18, 2026