CVE-2008-2566

Php-address Book < 3.1.5 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.

Exploits (2)

exploitdb WORKING POC VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5739
exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/18578

Scores

EPSS 0.0453
EPSS Percentile 89.0%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

php-address_book/php-address_book < 3.1.5

Timeline

Published Jun 06, 2008
Tracked Since Feb 18, 2026