Lucene search

MitreCVE-2008-2698

HistoryJun 13, 2008 - 7:41 p.m.

CVE-2008-2698

2008-06-1319:41:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-2698

cross-site scripting

xss

web security

vulnerabilities

webalbum 2.0

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the “add comment” section) in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) id, or (3) category parameter.

Affected configurations

Nvd

Node

web-albumwebalbumMatch2.0

VendorProductVersionCPE
web-albumwebalbum2.0cpe:2.3:a:web-album:webalbum:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
web-album	webalbum	2.0	cpe:2.3:a:web-album:webalbum:2.0:::::::*

References

securityreason.com/securityalert/3940

www.securityfocus.com/archive/1/493143/100/0/threaded

www.securityfocus.com/bid/29580

exchange.xforce.ibmcloud.com/vulnerabilities/42893

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Related for CVE-2008-2698