Lucene search
HistoryOct 27, 2008 - 8:00 p.m.
CVE-2008-4751
cve-2008-4751
xss
web script injection
html injection
ipei guestbook
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.127 Low
EPSS
Percentile
95.5%
Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597.
Affected configurations
Node
epistreamipei_guestbookMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| epistream:ipei_guestbook | epistream ipei guestbook | eq | 2.0 |
References
Related
cvelist
cvelist
CVE-2008-4751
2008-10-27 19:00:00
CVE-2005-4597
2006-01-01 23:00:00
nvd
nvd
CVE-2008-4751
2008-10-27 20:00:04
CVE-2005-4597
2005-12-31 05:00:00
prion
prion
Cross site scripting
2008-10-27 20:00:00
cve
cve
CVE-2005-4597
2006-01-01 23:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.127 Low
EPSS
Percentile
95.5%
Related for CVE-2008-4751