Lucene search

MitreCVE-2008-3180

HistoryJul 15, 2008 - 6:41 p.m.

CVE-2008-3180

2008-07-1518:41:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-3180

xss

contentnow cms

security

vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO.

Affected configurations

Nvd

Node

cwh_undergroundcontentnow_cmsMatch1.4.1

VendorProductVersionCPE
cwh_undergroundcontentnow_cms1.4.1cpe:2.3:a:cwh_underground:contentnow_cms:1.4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cwh_underground	contentnow_cms	1.4.1	cpe:2.3:a:cwh_underground:contentnow_cms:1.4.1:::::::*

References

secunia.com/advisories/30888

securityreason.com/securityalert/3990

www.securityfocus.com/bid/30102

exchange.xforce.ibmcloud.com/vulnerabilities/43610

www.exploit-db.com/exploits/6011

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Related for CVE-2008-3180