medium4.3Public exploit code
CVE-2008-6655
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the (1) nom_branche …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GEDCOM_TO_MYSQL - '/PHP/info.php' Multiple Cross-Site Scripting Vulnerabilities2008-05-05 · webapps · php · Verified
- GEDCOM_TO_MYSQL - '/PHP/index.php?nom_branche' Cross-Site Scripting2008-05-05 · webapps · php · Verified
- GEDCOM_TO_MYSQL - '/PHP/prenom.php' Multiple Cross-Site Scripting Vulnerabilities2008-05-05 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the (1) nom_branche and (2) nom parameters to php/prenom.php; the (3) nom_branche parameter to php/index.php; and the (4) nom_branche, (5) nom, and (6) prenom parameters to php/info.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comscripts | Gedcom To Mysl | Version 2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/29048
- http://www.securityfocus.com/bid/29048/exploit
- http://www.z0rlu.ownspace.org/index.php?/archives/75-GEDCOM_to_MySQL2-XSS.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42211
- http://www.securityfocus.com/bid/29048
- http://www.securityfocus.com/bid/29048/exploit
- http://www.z0rlu.ownspace.org/index.php?/archives/75-GEDCOM_to_MySQL2-XSS.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42211