CVE-2008-6439 Vulnerability Details

Record summary

CVE-2008-6439 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.

Description

Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits: 1

Proofs of concept

Catalogued exploits

ExploitDBAbleDating 2.4 - 'search_results.php?keyword' Cross-Site ScriptingExploitDB exploitby Ali JasbiNot analyzed1 file

ExploitDB

PoC details

References

30366Third-party advisory

http://secunia.com/advisories/30366

20080522 abledating 2.4 >> Sql injection and cross site scripting on search_results.phpmailing list

http://www.securityfocus.com/archive/1/492478/100/0/threaded

29342vdb entry

http://www.securityfocus.com/bid/29342

abledating-searchresults-xss(42596)vdb entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/42596

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2008-6439