CVE-2008-6631

EPSS 1.7%

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than CVE-2008-0679.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/31774unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/45038 http://secunia.com/advisories/30165 https://exchange.xforce.ibmcloud.com/vulnerabilities/42369 https://exchange.xforce.ibmcloud.com/vulnerabilities/42370 http://www.davidsopas.com/soapbox/blogphp.txt http://www.securityfocus.com/bid/29133