Lucene search

MitreCVE-2008-2212

HistoryMay 14, 2008 - 5:20 p.m.

CVE-2008-2212

2008-05-1417:20:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-2212

cross-site scripting

xss vulnerabilities

maian cart 1.1

security vulnerabilities

admin header

admin footer

keywords parameter

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

61.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4, and unspecified other parameters to admin/inc/header.php; the (5) msg_script3 and unspecified other parameters to admin/inc/footer.php; and the (6) keywords parameter to index.php in a search action.

Affected configurations

Nvd

Node

maianscriptworldmaian_cartMatch1.1

VendorProductVersionCPE
maianscriptworldmaian_cart1.1cpe:2.3:a:maianscriptworld:maian_cart:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
maianscriptworld	maian_cart	1.1	cpe:2.3:a:maianscriptworld:maian_cart:1.1:::::::*

References

securityreason.com/securityalert/3891

www.securityfocus.com/archive/1/491581/100/0/threaded

www.securityfocus.com/bid/29032

exchange.xforce.ibmcloud.com/vulnerabilities/42194

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

61.7%

JSON

Related for CVE-2008-2212