Lucene search
HistoryJul 29, 2008 - 6:41 p.m.
CVE-2008-3100
cve-2008-3100
xss
vulnerability
web script
html
lib/owl.lib.php
remote attackers
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.021 Low
EPSS
Percentile
89.0%
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php.
References
Related
securityvulns
securityvulns
seebug
seebug
Owl Intranet Engine register.php跨站脚本执行漏洞
2008-07-30 00:00:00
packetstorm
packetstorm
owl-xss.txt
2008-07-29 00:00:00
cvelist
cvelist
CVE-2008-3100
2008-07-29 18:00:00
prion
prion
Cross site scripting
2008-07-29 18:41:00
ubuntucve
ubuntucve
CVE-2008-3100
2008-07-29 00:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.021 Low
EPSS
Percentile
89.0%
Related for CVE-2008-3100