Lucene search

MitreCVE-2008-2188

HistoryMay 13, 2008 - 10:20 p.m.

CVE-2008-2188

2008-05-1322:20:00

CWE-79

mitre

web.nvd.nist.gov

xss

cross-site scripting

ej3 blackbook

vulnerabilities

web security

cve-2008-2188

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5) estiloCSS parameters to (b) header.php.

Affected configurations

Nvd

Node

eejj33blackbookMatch1.0

VendorProductVersionCPE
eejj33blackbook1.0cpe:2.3:a:eejj33:blackbook:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eejj33	blackbook	1.0	cpe:2.3:a:eejj33:blackbook:1.0:::::::*

References

securityreason.com/securityalert/3873

www.securityfocus.com/archive/1/491549/100/0/threaded

www.securityfocus.com/bid/29015

exchange.xforce.ibmcloud.com/vulnerabilities/42147

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Related for CVE-2008-2188