CVE-2008-3394

BookMine - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters.

References (5)

Scores

EPSS 0.0033
EPSS Percentile 55.5%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

infomining/bookmine

Timeline

Published Jul 31, 2008
Tracked Since Feb 18, 2026