CVE-2008-2646

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.44%

Published

Jun 10, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBmebiblio 0.4.7 - SQL Injection / Arbitrary File Upload / Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, (3) InsertBibliography parameter to insert_mask.inc.php, and (4) LabelYear parameter to search_mask.inc.php.

Weaknesses (CWE)

CWE-79

Affected Products (1)

mebiblio · mebibliovulnerable

References (8)

http://secunia.com/advisories/30488

http://www.securityfocus.com/bid/29465

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/42760

https://www.exploit-db.com/exploits/5716

http://secunia.com/advisories/30488

http://www.securityfocus.com/bid/29465

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/42760

https://www.exploit-db.com/exploits/5716

KEV Catalog EPSS Scores Vendors All CVEs