CVE-2008-6325

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1)…

published February 27, 2009

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) radio parameter to showcategory.php, (2) msg parameter to advertisers/signinform.php, (3) radio parameter to gallery.php, (4) msg parameter to lostpassword.php, (5) radio parameter to showcategory.php, (6) msg parameter to admin/adminhome.php, and (7) msg parameter to admin/index.php. NOTE: a different signinform.php file is already covered by CVE-2008-6306.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01492 · 73.8th percentile
Published
2009-02-27T11:00Z
EPSS history
Timeline
  • 27 FEB 11:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1)…
    cvelistv5