Lucene search

MitreCVE-2008-1800

HistoryApr 15, 2008 - 5:05 p.m.

CVE-2008-1800

2008-04-1517:05:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-1800

cross-site scripting

xss

vulnerabilities

divxdb

remote attackers

web script

html

index.php

security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1) choice, (2) page, (3) zone_admin, (4) general_search, and (5) import parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

divxdivxdbMatch0.94b2002

VendorProductVersionCPE
divxdivxdb0.94bcpe:2.3:a:divx:divxdb:0.94b:2002:*:*:*:*:*:*

Vendor	Product	Version	CPE
divx	divxdb	0.94b	cpe:2.3:a:divx:divxdb:0.94b:2002::::::

References

www.securityfocus.com/bid/28566

exchange.xforce.ibmcloud.com/vulnerabilities/41634

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.3%

JSON

Related for CVE-2008-1800