Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-1502
HistoryMar 25, 2008 - 7:44 p.m.

CVE-2008-1502

2008-03-2519:44:00
CWE-79
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.

Affected configurations

NVD
Node
egroupwareegroupwareRange≤1.4.002
OR
egroupwareegroupwareMatch1.0
OR
egroupwareegroupwareMatch1.0.1
OR
egroupwareegroupwareMatch1.0.3
OR
egroupwareegroupwareMatch1.0.6
OR
egroupwareegroupwareMatch1.2.106-2
OR
egroupwareegroupwareMatch1.4.001
OR
moodlemoodleRange≤1.8.4
OR
moodlemoodleMatch1.1.1
OR
moodlemoodleMatch1.2.0
OR
moodlemoodleMatch1.2.1
OR
moodlemoodleMatch1.3.0
OR
moodlemoodleMatch1.3.1
OR
moodlemoodleMatch1.3.2
OR
moodlemoodleMatch1.3.3
OR
moodlemoodleMatch1.3.4
OR
moodlemoodleMatch1.4.1
OR
moodlemoodleMatch1.4.2
OR
moodlemoodleMatch1.4.3
OR
moodlemoodleMatch1.4.4
OR
moodlemoodleMatch1.4.5
OR
moodlemoodleMatch1.5
OR
moodlemoodleMatch1.5.0beta
OR
moodlemoodleMatch1.5.1
OR
moodlemoodleMatch1.5.2
OR
moodlemoodleMatch1.5.3
OR
moodlemoodleMatch1.6.0
OR
moodlemoodleMatch1.6.1
OR
moodlemoodleMatch1.6.2
OR
moodlemoodleMatch1.6.3
OR
moodlemoodleMatch1.6.4
OR
moodlemoodleMatch1.6.5
OR
moodlemoodleMatch1.6.6
OR
moodlemoodleMatch1.6.7
OR
moodlemoodleMatch1.7.1
OR
moodlemoodleMatch1.7.2
OR
moodlemoodleMatch1.7.3
OR
moodlemoodleMatch1.7.4
OR
moodlemoodleMatch1.7.5
OR
moodlemoodleMatch1.7.6
OR
moodlemoodleMatch1.8.1
OR
moodlemoodleMatch1.8.2
OR
moodlemoodleMatch1.8.3

References

Related

cvelist 1
cve 1
nessus 6
openvas 18
debiancve 1
ubuntucve 1
prion 1
github 1
ubuntu 1
dsquare 1
d2 1
osv 4
fedora 1
gentoo 1
securityvulns 2
debian 3
cvelist
cvelist
CVE-2008-1502
2008-03-25 19:00:00
cve
cve
CVE-2008-1502
2008-03-25 19:44:00
nessus
nessus
Ubuntu 7.10 / 8.04 LTS : moodle vulnerability (USN-658-1)
2009-04-23 00:00:00
Fedora 8 : moodle-1.8.5-1.fc8 (2008-6226)
2008-07-10 00:00:00
openSUSE 10 Security Update : moodle (moodle-5439)
2008-07-16 00:00:00
openvas
openvas
Ubuntu Update for moodle vulnerability USN-658-1
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-658-1)
2009-03-23 00:00:00
Mandrake Security Advisory MDVSA-2009:265 (egroupware)
2009-10-19 00:00:00
debiancve
debiancve
CVE-2008-1502
2008-03-25 19:44:00
ubuntucve
ubuntucve
CVE-2008-1502
2008-03-25 00:00:00
prion
prion
Cross site scripting
2008-03-25 19:44:00
github
github
Moodle vulnerable to Cross-site scripting
2022-05-01 23:40:50
ubuntu
ubuntu
Moodle vulnerability
2008-10-23 00:00:00
dsquare
dsquare
Moodle <= 1.8.4 RCE
2012-01-26 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_MOODLE_REXEC
2008-03-25 19:44:00
osv
osv
Moodle vulnerable to Cross-site scripting
2022-05-01 23:40:50
moodle - several vulnerabilities
2008-12-22 00:00:00
wordpress - regression fix
2009-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: moodle-1.8.5-1.fc8
2008-07-09 02:50:05
gentoo
gentoo
eGroupWare: Multiple vulnerabilities
2008-05-07 00:00:00
securityvulns
securityvulns
[ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities
2008-05-08 00:00:00
Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2008-05-08 00:00:00
debian
debian
[SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities
2008-12-22 08:27:17
[SECURITY] [DSA 1871-2] New wordpress packages fix regression
2009-08-27 01:39:01
[SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities
2009-08-23 03:41:14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON
Related for NVD:CVE-2008-1502
cvelist1cve1nessus6openvas18debiancve1ubuntucve1prion1github1ubuntu1dsquare1d21osv4fedora1gentoo1securityvulns2debian3