CVE-2008-3237

EPSS 1.7%

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6069unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31084 http://securityreason.com/securityalert/4015 https://exchange.xforce.ibmcloud.com/vulnerabilities/43758 https://www.exploit-db.com/exploits/6069 http://www.securityfocus.com/bid/30215 http://www.vupen.com/english/advisories/2008/2107/references