CVE-2008-0207

Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.91% chance of exploitation in the next 30 days, 78th percentile

Published

2008-01-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30981

References

• CVE Record
• NVD entry

Related

• CVE-2008-0195
• CVE-2008-0210
• CVE-2008-0194
• CVE-2008-0218
• CVE-2008-0193
• CVE-2008-0219