CVE-2008-2188
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-2188
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5) estiloCSS parameters to (b) header.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
BlackBook 多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EJ3 BlackBook 1.0版本存在多个跨站脚本攻击漏洞。远程攻击者可以借助到(a)footer.php的(1)bookCopyright和(2)ver参数，以及到(b)header.php的(3)bookName,(4)bookMetaTags,和(5)estiloCSS参数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-2188
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-2188
Please Login to view more intelligence information
Same Patch Batch · n/a · 2008-05-13 · 34 CVEs total
| CVE-2008-2187 | MJGUEST 'mjguest.php' 跨站脚本攻击漏洞 | |
| CVE-2008-2179 | Ilient SysAid 'searchField' Parameter 跨站脚本攻击漏洞 | |
| CVE-2008-2180 | cpLinks admin/index.php 多个SQL注入漏洞 | |
| CVE-2008-2181 | cpLinks 多个跨站脚本攻击漏洞 | |
| CVE-2008-2182 | TYPO3 Powermail Extension 未明跨站脚本攻击漏洞 | |
| CVE-2008-2183 | SmartBlog 'index.php' SQL注入漏洞 | |
| CVE-2008-2184 | SmartBlog 中’index.php’ 多个输入验证错误漏洞 | |
| CVE-2008-2185 | SmartBlog 多个输入验证漏洞 | |
| CVE-2008-2186 | ChiCoMaS 'index.php'跨站脚本攻击漏洞 | |
| CVE-2008-2178 | LifeType searchTerms 在'admin.php'参数跨站脚本漏洞 | |
| CVE-2008-2168 | Apache HTTP服务器403 Error页面跨站脚本漏洞 | |
| CVE-2008-0322 | Microsoft Windows智能输入/输出(I2O)本地权限提升漏洞 | |
| CVE-2008-0713 | HP FTP Unspecified 远程拒绝服务漏洞 | |
| CVE-2008-2166 | Sun Java System Web Server Search Module 'index.jsp' 跨站脚本攻击漏洞 | |
| CVE-2008-2167 | ZyWALL 100 HTTP Referer头文件跨站脚本漏洞 | |
| CVE-2008-0166 | Debian OpenSSL 加密问题漏洞 | |
| CVE-2008-2163 | IBM Lotus Quickr WYSIWYG Editors 未明跨站脚本攻击漏洞 | |
| CVE-2007-5803 | Nagios Unspecified 跨站脚本攻击漏洞 | |
| CVE-2008-2177 | phpDirectorySource 多个SQL注入漏洞 | |
| CVE-2008-2176 | Zomplog 'category.php' 跨站脚本攻击漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-8187
Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption - CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM
V. Comments for CVE-2008-2188
No comments yet