Unscored CVE-2008-2206 EUVD-2008-2203GHSA-chhg-p6wv-vx5r

Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via th…

Published May 14, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter in a search action to index.php, and the (2) msg_script parameter to admin/inc/footer.php.

References

29032 vdb-entry
maian-music-index-footer-xss(42210) vdb-entry
3884 third-party-advisory
30066 third-party-advisory
20080503 Maian Music v1.1 Multiple Vulnerabilities (Xss/SQL Injection) mailing-list