CVE-2008-6386

2009-03-0219:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References

packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt

www.securityfocus.com/bid/32598

exchange.xforce.ibmcloud.com/vulnerabilities/47028