What is CVE-2008-0617?

CVE-2008-0617 is a vulnerability in Dmsguestbook Project, classified under Cross-site Scripting. Published 2008-02-06.

Is CVE-2008-0617 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Dmsguestbook Project

CVE-2008-0617

Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter to wp-admin/admin.php, or the (2) messagefield parameter in the guestbook page, and the (3) title parameter in the messagearea.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.027 (84.1th percentile) — read the EPSS interpretation.

Affected products

Dmsguestbook_project Dmsguestbook — versions 1.7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SREASON, Broken Link, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2008-0617?: CVE-2008-0617 is a vulnerability in Dmsguestbook Project, classified under Cross-site Scripting. Published 2008-02-06.
Is CVE-2008-0617 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.