CVE-2008-3941

BizDirectory <2.04 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Am!r · textwebappsphp

https://www.exploit-db.com/exploits/32312

View Code ZIP pw:eip

References (3)

[Exploit] http://marc.info/?l=bugtraq&m=122039853426550&w=2

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/30980

[Third Party Advisory] http://securityreason.com/securityalert/4222

Scores

EPSS 0.0161

EPSS Percentile 81.5%

Classification

CWE

CWE-79

Status draft

Affected Products (3)

bizdirectory/bizdirectory < 2.04

bizdirectory/bizdirectory

Timeline

Published Sep 05, 2008

Tracked Since Feb 18, 2026