Lucene search

K
nvd[email protected]NVD:CVE-2008-1468
HistoryMar 24, 2008 - 9:44 p.m.

CVE-2008-1468

2008-03-2421:44:00
CWE-79
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.008

Percentile

82.2%

Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
namazunamazuRange2.0.17
OR
namazunamazuMatch1.3.0.11
OR
namazunamazuMatch2.0
OR
namazunamazuMatch2.0.2
OR
namazunamazuMatch2.0.12
OR
namazunamazuMatch2.0.13
OR
namazunamazuMatch2.0.14
OR
namazunamazuMatch2.0.15
OR
namazunamazuMatch2.0.16

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.008

Percentile

82.2%