Lucene search

K
cveMitreCVE-2008-6130
HistoryFeb 13, 2009 - 6:30 p.m.

CVE-2008-6130

2009-02-1318:30:04
CWE-79
mitre
web.nvd.nist.gov
23
xss
vulnerability
mozilowiki
web script
html
injection
index.php
cve-2008-6130

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

65.1%

Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) action and (2) page parameters.

Affected configurations

Nvd
Node
mozilomozilowikiRange1.0.1
OR
mozilomozilowikiMatch0.7
OR
mozilomozilowikiMatch0.8
OR
mozilomozilowikiMatch0.9
OR
mozilomozilowikiMatch0.10
OR
mozilomozilowikiMatch1.0.0
VendorProductVersionCPE
mozilomozilowiki*cpe:2.3:a:mozilo:mozilowiki:*:*:*:*:*:*:*:*
mozilomozilowiki0.7cpe:2.3:a:mozilo:mozilowiki:0.7:*:*:*:*:*:*:*
mozilomozilowiki0.8cpe:2.3:a:mozilo:mozilowiki:0.8:*:*:*:*:*:*:*
mozilomozilowiki0.9cpe:2.3:a:mozilo:mozilowiki:0.9:*:*:*:*:*:*:*
mozilomozilowiki0.10cpe:2.3:a:mozilo:mozilowiki:0.10:*:*:*:*:*:*:*
mozilomozilowiki1.0.0cpe:2.3:a:mozilo:mozilowiki:1.0.0:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

65.1%

Related for CVE-2008-6130