Lucene search

K
cveMitreCVE-2008-3847
HistoryAug 27, 2008 - 11:41 p.m.

CVE-2008-3847

2008-08-2723:41:00
CWE-79
mitre
web.nvd.nist.gov
29
cve-2008-3847
ang
xss
vulnerabilities
web script
html
remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.3%

Multiple cross-site scripting (XSS) vulnerabilities in AN Guestbook (ANG) before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
aguestbookan_guestbookRange0.7.5
OR
aguestbookan_guestbookMatch0.1
OR
aguestbookan_guestbookMatch0.2
OR
aguestbookan_guestbookMatch0.3.1
OR
aguestbookan_guestbookMatch0.3.2
OR
aguestbookan_guestbookMatch0.3.3
OR
aguestbookan_guestbookMatch0.3.4
OR
aguestbookan_guestbookMatch0.3.5
OR
aguestbookan_guestbookMatch0.4
OR
aguestbookan_guestbookMatch0.4.1
OR
aguestbookan_guestbookMatch0.4.5
OR
aguestbookan_guestbookMatch0.5
OR
aguestbookan_guestbookMatch0.6
OR
aguestbookan_guestbookMatch0.7
OR
aguestbookan_guestbookMatch0.7.1
VendorProductVersionCPE
aguestbookan_guestbook*cpe:2.3:a:aguestbook:an_guestbook:*:*:*:*:*:*:*:*
aguestbookan_guestbook0.1cpe:2.3:a:aguestbook:an_guestbook:0.1:*:*:*:*:*:*:*
aguestbookan_guestbook0.2cpe:2.3:a:aguestbook:an_guestbook:0.2:*:*:*:*:*:*:*
aguestbookan_guestbook0.3.1cpe:2.3:a:aguestbook:an_guestbook:0.3.1:*:*:*:*:*:*:*
aguestbookan_guestbook0.3.2cpe:2.3:a:aguestbook:an_guestbook:0.3.2:*:*:*:*:*:*:*
aguestbookan_guestbook0.3.3cpe:2.3:a:aguestbook:an_guestbook:0.3.3:*:*:*:*:*:*:*
aguestbookan_guestbook0.3.4cpe:2.3:a:aguestbook:an_guestbook:0.3.4:*:*:*:*:*:*:*
aguestbookan_guestbook0.3.5cpe:2.3:a:aguestbook:an_guestbook:0.3.5:*:*:*:*:*:*:*
aguestbookan_guestbook0.4cpe:2.3:a:aguestbook:an_guestbook:0.4:*:*:*:*:*:*:*
aguestbookan_guestbook0.4.1cpe:2.3:a:aguestbook:an_guestbook:0.4.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.3%

Related for CVE-2008-3847