Vulnerability Details CVE-2008-7117
                eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) files via a certain request with the file parameter set to style.css.  NOTE: this can probably be leveraged for cross-site scripting (XSS) attacks.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.012
                        
                    
                    
                        
                            EPSS Ranking 78.3%
                        
                    
                 
                
                    CVSS Severity
                    
                    
                        
                            CVSS v2 Score 5.0
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2008-7117
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:webidsupport:webid:0.5.4