QwikSec

Security Database

CVE

CWE

Training

CVE-2008-0207

Published: Jan 10, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://websecurity.com.ua/1259/

x_refsource_MISC

20080103 securityvulns.com russian vulnerabilities digest

mailing-list

x_refsource_FULLDISC

third-party-advisory

x_refsource_SECUNIA

http://securityvulns.ru/Sdocument731.html

x_refsource_MISC

vdb-entry

x_refsource_BID

20080103 securityvulns.com russian vulnerabilities digest

mailing-list

x_refsource_BUGTRAQ

http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797

x_refsource_MISC

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.