CVE-2008-2644

Smeweb - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s parameter to order.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5725

References (5)

Scores

EPSS 0.0370
EPSS Percentile 87.8%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

smeweb/smeweb
smeweb/smeweb

Timeline

Published Jun 10, 2008
Tracked Since Feb 18, 2026