Unscored severity · published Apr 6, 2009
CVE-2008-6609
Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpcksec · Ott
0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6609
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6609
Exploit
http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt
www.securityfocus.com
http://www.securityfocus.com/bid/32890
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47425
More from Phpcksec
–
CVE-2008-6610
Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbitrary directories and read arbitrary files via a full…