Lucene search

[email protected]CVE-2008-0576

HistoryFeb 05, 2008 - 2:00 a.m.

CVE-2008-0576

2008-02-0502:00:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-0576

cross-site scripting

xss

drupal

vulnerability

nvd

security issue

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors that write to summary table pages.

Affected configurations

NVD

Node

drupalproject_issue_tracking_moduleMatch4.7

drupalproject_issue_tracking_moduleMatch5

CPENameOperatorVersion
drupal:project_issue_tracking_moduledrupal project issue tracking moduleeq4.7
drupal:project_issue_tracking_moduledrupal project issue tracking moduleeq5

CPE	Name	Operator	Version
drupal:project_issue_tracking_module	drupal project issue tracking module	eq	4.7
drupal:project_issue_tracking_module	drupal project issue tracking module	eq	5

References

drupal.org/node/216062

secunia.com/advisories/28731

www.vupen.com/english/advisories/2008/0376/references

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Related for CVE-2008-0576

nvd1 prion1 cvelist1