CVE-2008-1414

Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the…

published March 20, 2008

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the tab parameter to (1) index.php, as demonstrated using mixed case and encoded whitespace characters in the tag; or (2) clientinfo.php, (3) invoices.php, (4) smartlinks.php, and (5) todo.php, as demonstrated using a META tag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01776 · 78.0th percentile
Published
2008-03-20T10:00Z
EPSS history
Timeline
  • 20 MAR 10:00Z
    Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the…
    cvelistv5