31245Third-party advisory
http://secunia.com/advisories/31245 CVE-2008-3581
k-links directory - SQL Injection / Cross-Site Scripting
Record summary
CVE-2008-3581 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the login_message parameter in a login action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBk-links directory - SQL Injection / Cross-Site ScriptingExploitDB exploitby CorwinNot analyzed1 file
References
64131Third-party advisory
http://securityreason.com/securityalert/4131 30520vdb entry
http://www.securityfocus.com/bid/30520 klinks-loginmessage-xss(44161)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44161 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-3581 6192exploit
https://www.exploit-db.com/exploits/6192