CVE-2008-2994: Phpeasydata

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (2) by and (3) cat_id parameters to annuaire.php.

Affected products

• Phpeasydata Phpeasydata: version 1.5.4 only

Published 2008-07-03. Last modified 2026-06-16.