Unscored severity · published Jun 13, 2008
CVE-2008-2694
Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpinv · Phpinv
0.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2694
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2694
Exploit
http://www.securityfocus.com/bid/29597
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42928
www.exploit-db.com
https://www.exploit-db.com/exploits/5754
More from Phpinv
–
CVE-2008-2695
Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a