Lucene search

MitreCVE-2008-1873

HistoryApr 17, 2008 - 7:05 p.m.

CVE-2008-1873

2008-04-1719:05:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-1873

cross-site scripting

xss

nuke et

internet explorer

css

style attribute

div element

mensaje parameter

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.003

Percentile

68.2%

JSON

Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authenticated users to inject arbitrary web script or HTML via a CSS property in the STYLE attribute of a DIV element in the mensaje parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

tru-zonenukeetMatch3.2

tru-zonenukeetMatch3.4

AND

microsoftinternet_explorer

VendorProductVersionCPE
tru-zonenukeet3.2cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*
tru-zonenukeet3.4cpe:2.3:a:tru-zone:nukeet:3.4:*:*:*:*:*:*:*
microsoftinternet_explorer*cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tru-zone	nukeet	3.2	cpe:2.3:a:tru-zone:nukeet:3.2:::::::*
tru-zone	nukeet	3.4	cpe:2.3:a:tru-zone:nukeet:3.4:::::::*
microsoft	internet_explorer	*	cpe:2.3:a:microsoft:internet_explorer::::::::

References

mrzayas.es/wp-content/poc/nukeet.txt

secunia.com/advisories/29651

www.mrzayas.es/2008/04/04/xploitnukeet3/

www.securityfocus.com/bid/28614

exchange.xforce.ibmcloud.com/vulnerabilities/41646

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.003

Percentile

68.2%

JSON

Related for CVE-2008-1873