CVE-2015-8831

🗓️ 09 Feb 2017 15:00:00Reported by debianType

cve

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 38 Views🌐 WEB

XSS vuln in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via author name

Reporter	Title	Published	Views	Family All 8
CNVD	Dotclear cross-site scripting vulnerability (CNVD-2017-01936)	16 Feb 201700:00	–	cnvd
Cvelist	CVE-2015-8831	9 Feb 201715:00	–	cvelist
EUVD	EUVD-2015-8697	7 Oct 202500:30	–	euvd
NVD	CVE-2015-8831	9 Feb 201715:59	–	nvd
OSV	UBUNTU-CVE-2015-8831	9 Feb 201715:59	–	osv
Prion	Cross site scripting	9 Feb 201715:59	–	prion
UbuntuCve	CVE-2015-8831	9 Feb 201715:59	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2015-8831	10 Sep 202500:00	–	nessus

NVD

Node

dotclear dotclearRange≤2.8.1

Source	Link
openwall	www.openwall.com/lists/oss-security/2016/03/05/4
securityfocus	www.securityfocus.com/bid/96377
hg	www.hg.dotclear.org/dotclear/rev/65e65154dadf
blog	www.blog.curesec.com/article/blog/dotclear-281-XSS-94.html
packetstormsecurity	www.packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html
seclists	www.seclists.org/fulldisclosure/2015/Nov/59
openwall	www.openwall.com/lists/oss-security/2016/03/07/5
dotclear	www.dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2

Parameter	Position	Path	Description	CWE
author	request body	admin/comments.php	XSS via author name in a comment in Dotclear before 2.8.2	CWE-79

13 May 2026 00:24Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00927

cve-2015-8831 cross-site scripting xss admin dotclear security vulnerability