CVE-2008-4802: XSS

Published Oct 31, 2008

Updated

Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Simple PHP Scripts blog=0.3

Event History

Oct 31, 2008

CVE Published

via MITRE·04:42 PM

Data Sourced

via MITRE·04:42 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4802?

CVE-2008-4802 has a medium severity level as it allows cross-site scripting attacks.

How do I fix CVE-2008-4802?

To fix CVE-2008-4802, you should validate and encode the id parameter in complete.php to prevent XSS.

Who is affected by CVE-2008-4802?

Users of Simple PHP Scripts blog version 0.3 are affected by CVE-2008-4802.

What type of vulnerability is CVE-2008-4802?

CVE-2008-4802 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.

Can CVE-2008-4802 be exploited remotely?

Yes, CVE-2008-4802 can be exploited remotely by attackers who manipulate the id parameter.