Lucene search

[email protected]NVD:CVE-2008-2759

HistoryJun 18, 2008 - 10:41 p.m.

CVE-2008-2759

2008-06-1822:41:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

66.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

xiglaabsolute_form_processor_xeMatch4.0

VendorProductVersionCPE
xiglaabsolute_form_processor_xe4.0cpe:2.3:a:xigla:absolute_form_processor_xe:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xigla	absolute_form_processor_xe	4.0	cpe:2.3:a:xigla:absolute_form_processor_xe:4.0:::::::*

References

bugreport.ir/index.php?/41

marc.info/?l=bugtraq&m=121322052622903&w=2

secunia.com/advisories/30640

securityreason.com/securityalert/3950

www.securityfocus.com/bid/29672

exchange.xforce.ibmcloud.com/vulnerabilities/43047

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

66.2%

JSON

Related for NVD:CVE-2008-2759

cve1 prion1 cvelist1