Lucene search

MitreCVE-2008-1306

HistoryMar 12, 2008 - 5:44 p.m.

CVE-2008-1306

2008-03-1217:44:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-1306

cross-site scripting

savvy content manager

remote attack

web script

html

search optimization

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

61.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to (1) searchresults.cfm, (2) search_results.cfm, and (3) search_results/index.cfm. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

besavvysavvy_content_manager

VendorProductVersionCPE
besavvysavvy_content_manager*cpe:2.3:a:besavvy:savvy_content_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
besavvy	savvy_content_manager	*	cpe:2.3:a:besavvy:savvy_content_manager::::::::

References

secunia.com/advisories/29298

www.besavvy.com/blog/index.cfm/2008/3/11/Security-Patch

www.securityfocus.com/bid/28200

exchange.xforce.ibmcloud.com/vulnerabilities/41342

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

61.2%

JSON

Related for CVE-2008-1306