CVE-2008-7140

State: Published
Severity: Not scored
Published: Sep 1, 2009
Updated: Aug 7, 2024
Reserved: Sep 1, 2009

Description

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) language_setup parameter to setup.php or (2) test parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: a third party has been reported that the test parameter is not used in @lex Guestbook.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://downloads.securityfocus.com/vulnerabilities/exploits/28519.html
http://www.juniper.net/security/auto/vulnerabilities/vuln28519.html
lexguestbook-setup-index-xss(41566)vdb-entry
28519vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.