CVE-2008-6977

EPSS 1.8%

Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/6420unverified cve_referencewww.exploit-db.com/exploits/6357unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/47915 http://secunia.com/advisories/31649 https://exchange.xforce.ibmcloud.com/vulnerabilities/44878 https://www.exploit-db.com/exploits/6357 https://www.exploit-db.com/exploits/6420 http://www.securityfocus.com/bid/30996