Lucene search

K
cve[email protected]CVE-2008-2787
HistoryJun 20, 2008 - 11:48 a.m.

CVE-2008-2787

2008-06-2011:48:00
CWE-79
web.nvd.nist.gov
19
cve-2008-2787
cross-site scripting
xss
opendocman
security vulnerability

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.8%

Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the last_message parameter.

Affected configurations

NVD
Node
opendocmanopendocmanMatch1.2.5
CPENameOperatorVersion
opendocman:opendocmanopendocmaneq1.2.5

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.8%

Related for CVE-2008-2787