XSS in Benjamin Kuz Dynamic Mp3 Lister
CVE-2008-4174
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.
Affected products
- Benjamin_kuz Dynamic_mp3_lister — versions 2.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)