Lucene search

MitreCVE-2008-3305

HistoryJul 25, 2008 - 4:41 p.m.

CVE-2008-3305

2008-07-2516:41:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-3305

cross-site scripting

xss

mensaje.php

c. desseno youtube blog

ytb 0.1

nvd

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to inject arbitrary web script or HTML via the m parameter.

Affected configurations

Nvd

Node

carlos_dessenoyoutube_blogMatch0.1

VendorProductVersionCPE
carlos_dessenoyoutube_blog0.1cpe:2.3:a:carlos_desseno:youtube_blog:0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
carlos_desseno	youtube_blog	0.1	cpe:2.3:a:carlos_desseno:youtube_blog:0.1:::::::*

References

secunia.com/advisories/31161

securityreason.com/securityalert/4037

www.securityfocus.com/bid/30345

exchange.xforce.ibmcloud.com/vulnerabilities/43953

www.exploit-db.com/exploits/6117

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Related for CVE-2008-3305