CVE-2008-3448

csphonebook 1.02 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Ghost Hacker · textwebappsphp

https://www.exploit-db.com/exploits/32135

View Code ZIP pw:eip

References (6)

[Exploit] http://www.securityfocus.com/bid/30485

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/44180

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/494971/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/496788/100/0/threaded

[Third Party Advisory] http://secunia.com/advisories/31359

[Third Party Advisory] http://securityreason.com/securityalert/4102

Scores

EPSS 0.0439

EPSS Percentile 88.8%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

common-solutions/csphonebook

Timeline

Published Aug 04, 2008

Tracked Since Feb 18, 2026