Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3740
HistoryAug 27, 2008 - 12:00 a.m.

CVE-2008-3740

2008-08-2700:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

69.9%

Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x
before 5.10 and 6.x before 6.4 allows remote attackers to inject arbitrary
web script or HTML via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchdrupal5< 5.7-1ubuntu1.2UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

69.9%