Unscored CVE-2008-2494 EUVD-2008-2489GHSA-cqjv-j347-j5q2

Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via th…

Published May 28, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter.

References

20080525 Zina 1.0rc3 Remote Directory Traversal Vulnerability & XSS Vulnerability mailing-list
zina-index-xss(42642) vdb-entry
29367 vdb-entry