Lucene search

MitreCVE-2008-2533

HistoryJun 03, 2008 - 3:32 p.m.

CVE-2008-2533

2008-06-0315:32:00

CWE-79

mitre

web.nvd.nist.gov

phoenix view cms

xss vulnerabilities

cve-2008-2533

nvd

security

cross-site scripting

web script

html

remote attackers

admin

ltarget parameter

conf parameter

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ltarget parameter to (a) admin/admin_frame.php and the (2) conf parameter to (b) gbuch.admin.php, © links.admin.php, (d) menue.admin.php, (e) news.admin.php, and (f) todo.admin.php in admin/module/.

Affected configurations

Nvd

Node

fkrauthanphoenix_view_cmsMatch2-pre-alpha

VendorProductVersionCPE
fkrauthanphoenix_view_cms2-pre-alphacpe:2.3:a:fkrauthan:phoenix_view_cms:2-pre-alpha:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fkrauthan	phoenix_view_cms	2-pre-alpha	cpe:2.3:a:fkrauthan:phoenix_view_cms:2-pre-alpha:::::::*

References

www.securityfocus.com/bid/29130

exchange.xforce.ibmcloud.com/vulnerabilities/42314

www.exploit-db.com/exploits/5578

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

Related for CVE-2008-2533