50654vdb entry
http://osvdb.org/50654 CVE-2008-6359
Max Guestbook 1.0 - Multiple Vulnerabilities
Record summary
CVE-2008-6359 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMax Guestbook 1.0 - Multiple VulnerabilitiesExploitDB exploitby n0tchNot analyzed1 file
References
10packetstormsecurity.org
http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html 33106Third-party advisory
http://secunia.com/advisories/33106 18595exploit
http://www.exploit-db.com/exploits/18595 20081210 Max's Guestbook (XSS) Remote Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/499099/100/0/threaded 32763vdb entry
http://www.securityfocus.com/bid/32763 52471vdb entry
http://www.securityfocus.com/bid/52471 maxsguestbook-index-xss(47250)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47250 maxguestbook-name-xss(74011)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74011 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-6359