CVE-2008-1800: Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attacker...

Security readout for executives and security teams

This CVE describes cross-site scripting in DivXDB 2002 0.94b. A remote attacker may be able to inject browser-executed script through several index.php parameters. The record has no CVSS score, no CWE mapping, and explicitly says the provenance is unknown, so urgency depends on whether this legacy app is actually deployed. Exposure is most likely limited to organizations still running legacy DivXDB 2002 0.94b, especially if index.php is reachable from the internet or from trusted user sessions. Treat this as a discovery and containment item unless the application is public-facing or used by privileged staff. If found online, prioritize removal or isolation because legacy XSS can support session theft, phishing, and unauthorized user actions. Mitigation focus: Inventory web assets for DivXDB 2002 0.94b or matching index.php deployments.; Check vendor or maintainer guidance before claiming a patch exists.; Retire, replace, or isolate unsupported legacy deployments where feasible..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.