Lucene search
HistoryJul 31, 2008 - 4:41 p.m.
CVE-2008-3398
cve-2008-3398
xrms crm
cross-site scripting
xss
web security
5.9 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
64.8%
Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xrms:xrms_crm | xrms xrms crm | eq | 1.99.2 |
Related
prion
prion
Cross site scripting
2008-07-31 16:41:00
Cross site scripting
2008-03-04 00:44:00
Cross site scripting
2008-09-05 16:08:00
cve
cve
CVE-2008-1129
2008-03-04 00:44:00
CVE-2008-3664
2008-09-05 16:08:00
packetstorm
packetstorm
xrms-sqlxss.txt
2008-09-04 00:00:00
securityvulns
securityvulns
5.9 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
64.8%
Related for CVE-2008-3398