CVE-2008-4751

Epistream Ipei Guestbook - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Ghost Hacker · textwebappsphp

https://www.exploit-db.com/exploits/32528

View Code ZIP pw:eip

References (7)

[Exploit] http://packetstormsecurity.org/0810-exploits/ipei-xss.txt

[Vendor Advisory] http://secunia.com/advisories/32429

[Exploit] http://www.securityfocus.com/bid/31911

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46111

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/497783/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/2920

[Third Party Advisory] http://securityreason.com/securityalert/4510

Scores

EPSS 0.0596

EPSS Percentile 90.5%

Classification

CWE

CWE-79

Status published

Affected Products (2)

epistream/ipei_guestbook

n/a/n/a

Timeline

Published Oct 27, 2008

Tracked Since Feb 18, 2026