CVE-2008-3305

MEDIUM 4.3CVE-2008-3305 · Published 25/07/2008 · updated 16/06/2026

In short

CVE-2008-3305 is a MEDIUM (CVSS 4.3) vulnerability affecting youtube blog (carlos desseno).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
youtube blog carlos_desseno	`= 0.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to inject arbitrary web script or HTML via the m parameter.

References

secunia.com/advisories/31161 · Vendor Advisory
securityreason.com/securityalert/4037
securityfocus.com/bid/30345 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/43953
exploit-db.com/exploits/6117

More vulnerabilities in youtube blog

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free