Lucene search
MitreCVE-2008-6437HistoryMar 06, 2009 - 6:30 p.m.
CVE-2008-6437
2009-03-0618:30:00
CWE-79
mitre
web.nvd.nist.gov
25
xss
vulnerability
phpfreeforum
remote attackers
web script
html
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.004
Percentile
72.6%
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php.
Affected configurations
Node
lukas_waldaufphpfreeforumRange≤1.0rc2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lukas_waldauf | phpfreeforum | * | cpe:2.3:a:lukas_waldauf:phpfreeforum:*:rc2:*:*:*:*:*:* |
Related
exploitdb
exploitdb
prion
prion
Cross site scripting
2009-03-06 18:30:00
cvelist
cvelist
CVE-2008-6437
2009-03-06 18:00:00
nvd
nvd
CVE-2008-6437
2009-03-06 18:30:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.004
Percentile
72.6%
Related for CVE-2008-6437