Lucene search

[email protected]CVE-2008-3782

HistoryAug 26, 2008 - 2:41 p.m.

CVE-2008-3782

2008-08-2614:41:00

CWE-79

[email protected]

web.nvd.nist.gov

xss

cross-site scripting

acg-ptp 1.0.6

admin

security vulnerability

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Category name field under Advertisement Packages, the (2) Reason field under Credit/Debit Users, and the (3) FAQ question and (4) FAQ answer fields under Add New FAQ Entry.

Affected configurations

NVD

Node

discountedscriptsacg_ptpMatch1.0.6

CPENameOperatorVersion
discountedscripts:acg_ptpdiscountedscripts acg ptpeq1.0.6

CPE	Name	Operator	Version
discountedscripts:acg_ptp	discountedscripts acg ptp	eq	1.0.6

References

lists.grok.org.uk/pipermail/full-disclosure/2008-August/064038.html

secunia.com/advisories/31591

www.securityfocus.com/bid/30793

exchange.xforce.ibmcloud.com/vulnerabilities/44603

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

JSON

Related for CVE-2008-3782

prion1 cvelist1 nvd1