Lucene search
HistoryNov 13, 2008 - 11:30 a.m.
CVE-2008-5059
cve
2008
5059
cross-site scripting
xss
modernbill
security vulnerability
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.3%
Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action.
Affected configurations
Node
modernbillmodernbillRange≤4.4
ORmodernbillmodernbillRange≤4.4.0
ORmodernbillmodernbillMatch2.01
ORmodernbillmodernbillMatch2.02s
ORmodernbillmodernbillMatch3.0beta
ORmodernbillmodernbillMatch3.1.0
ORmodernbillmodernbillMatch3.1.3
ORmodernbillmodernbillMatch4.0.1rc7
ORmodernbillmodernbillMatch4.0.1rc8
ORmodernbillmodernbillMatch4.0.2
ORmodernbillmodernbillMatch4.1.1
ORmodernbillmodernbillMatch4.1.2
ORmodernbillmodernbillMatch4.1.3
ORmodernbillmodernbillMatch4.2.1
ORmodernbillmodernbillMatch4.3.0
ORmodernbillmodernbillMatch4.3.2
Related
prion
prion
Cross site scripting
2008-11-13 11:30:00
cvelist
cvelist
CVE-2008-5059
2008-11-13 11:00:00
nvd
nvd
CVE-2008-5059
2008-11-13 11:30:01
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.3%
Related for CVE-2008-5059