CVE-2008-6428

2009-03-0618:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.

References

kayalang.org/about/news

osvdb.org/45882

secunia.com/advisories/30466

exchange.xforce.ibmcloud.com/vulnerabilities/42774