Lucene search
HistoryMar 10, 2008 - 5:44 p.m.
CVE-2008-1224
cve-2008-1224
cross-site scripting
xss
bosclassifieds
classified ads system
vulnerability
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.8%
Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
Node
bosdevbosclassifieds_classified_adsMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| bosdev:bosclassifieds_classified_ads | bosdev bosclassifieds classified ads | eq | 3.0 |
Related
prion
prion
Cross site scripting
2008-03-10 17:44:00
nvd
nvd
CVE-2008-1224
2008-03-10 17:44:00
cvelist
cvelist
CVE-2008-1224
2008-03-10 17:00:00
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.8%
Related for CVE-2008-1224