Lucene search

MitreCVE-2008-3255

HistoryJul 22, 2008 - 4:41 p.m.

CVE-2008-3255

2008-07-2216:41:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-3255

cross-site scripting

xss

lunarnight laboratory webproxy

webproxy 1.7.8

nvd

vulnerability

security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

54.9%

JSON

Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

ln-labwebproxyMatch1.7

ln-labwebproxyMatch1.7.1

ln-labwebproxyMatch1.7.2

ln-labwebproxyMatch1.7.3

ln-labwebproxyMatch1.7.4

ln-labwebproxyMatch1.7.5

ln-labwebproxyMatch1.7.6

ln-labwebproxyMatch1.7.7

ln-labwebproxyMatch1.7.8

VendorProductVersionCPE
ln-labwebproxy1.7cpe:2.3:a:ln-lab:webproxy:1.7:*:*:*:*:*:*:*
ln-labwebproxy1.7.1cpe:2.3:a:ln-lab:webproxy:1.7.1:*:*:*:*:*:*:*
ln-labwebproxy1.7.2cpe:2.3:a:ln-lab:webproxy:1.7.2:*:*:*:*:*:*:*
ln-labwebproxy1.7.3cpe:2.3:a:ln-lab:webproxy:1.7.3:*:*:*:*:*:*:*
ln-labwebproxy1.7.4cpe:2.3:a:ln-lab:webproxy:1.7.4:*:*:*:*:*:*:*
ln-labwebproxy1.7.5cpe:2.3:a:ln-lab:webproxy:1.7.5:*:*:*:*:*:*:*
ln-labwebproxy1.7.6cpe:2.3:a:ln-lab:webproxy:1.7.6:*:*:*:*:*:*:*
ln-labwebproxy1.7.7cpe:2.3:a:ln-lab:webproxy:1.7.7:*:*:*:*:*:*:*
ln-labwebproxy1.7.8cpe:2.3:a:ln-lab:webproxy:1.7.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ln-lab	webproxy	1.7	cpe:2.3:a:ln-lab:webproxy:1.7:::::::*
ln-lab	webproxy	1.7.1	cpe:2.3:a:ln-lab:webproxy:1.7.1:::::::*
ln-lab	webproxy	1.7.2	cpe:2.3:a:ln-lab:webproxy:1.7.2:::::::*
ln-lab	webproxy	1.7.3	cpe:2.3:a:ln-lab:webproxy:1.7.3:::::::*
ln-lab	webproxy	1.7.4	cpe:2.3:a:ln-lab:webproxy:1.7.4:::::::*
ln-lab	webproxy	1.7.5	cpe:2.3:a:ln-lab:webproxy:1.7.5:::::::*
ln-lab	webproxy	1.7.6	cpe:2.3:a:ln-lab:webproxy:1.7.6:::::::*
ln-lab	webproxy	1.7.7	cpe:2.3:a:ln-lab:webproxy:1.7.7:::::::*
ln-lab	webproxy	1.7.8	cpe:2.3:a:ln-lab:webproxy:1.7.8:::::::*

References

jvn.jp/en/jp/JVN49704543/index.html

secunia.com/advisories/31042

www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni

www.securityfocus.com/bid/30283

exchange.xforce.ibmcloud.com/vulnerabilities/43879

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

54.9%

JSON

Related for CVE-2008-3255