CVE-2008-2677
Telephone Directory 2008 - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5764
Scores
EPSS
0.0313
EPSS Percentile
86.7%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
telephone/telephone_directory_2008
Timeline
Published
Jun 12, 2008
Tracked Since
Feb 18, 2026