CVE-2008-3739
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.0%
Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences.
Affected configurations
References
jvn.jp/en/jp/JVN27417220/index.html
jvn.jp/en/jp/JVN52557009/index.html
jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html
secunia.com/advisories/31574
secunia.com/advisories/31582
wiz.syscon.co.jp/Details.htm
www.securityfocus.com/bid/30791
www.spacetag.jp/modules/products/index.php?id=54
exchange.xforce.ibmcloud.com/vulnerabilities/44593
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.0%