CVE-2008-2839
Traindepot - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5848
Scores
EPSS
0.0313
EPSS Percentile
86.7%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
traindepot/traindepot
Timeline
Published
Jun 24, 2008
Tracked Since
Feb 18, 2026