Lucene search

MitreCVE-2008-3391

HistoryJul 31, 2008 - 4:41 p.m.

CVE-2008-3391

2008-07-3116:41:00

CWE-79

mitre

web.nvd.nist.gov

cve

2008

3391

cross-site scripting

xss

web wiz forum

vulnerabilities

remote attack

html injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

73.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.asp.

Affected configurations

Nvd

Node

webwizguideweb_wiz_forumMatch9.5

VendorProductVersionCPE
webwizguideweb_wiz_forum9.5cpe:2.3:a:webwizguide:web_wiz_forum:9.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webwizguide	web_wiz_forum	9.5	cpe:2.3:a:webwizguide:web_wiz_forum:9.5:::::::*

References

depo2.nm.ru/WebWiz_Forum_v9.5_XSS.txt

depo2.nm.ru/WebWiz_Forum_v9.5_XSS2.txt

secunia.com/advisories/31281

www.securityfocus.com/bid/30398

exchange.xforce.ibmcloud.com/vulnerabilities/44012

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

73.8%

JSON

Related for CVE-2008-3391