Lucene search

MitreCVE-2008-5193

HistoryNov 21, 2008 - 5:30 p.m.

CVE-2008-5193

2008-11-2117:30:00

CWE-79

mitre

web.nvd.nist.gov

xss

cross-site scripting

cve-2008-5193

w1l3d4 philboard 1.14

w1l3d4 philboard 1.2

remote attackers

searchterms parameter

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024.

Affected configurations

Nvd

Node

philboardphilboardMatch1.2

philboardphilboardMatch1.14

VendorProductVersionCPE
philboardphilboard1.2cpe:2.3:a:philboard:philboard:1.2:*:*:*:*:*:*:*
philboardphilboard1.14cpe:2.3:a:philboard:philboard:1.14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
philboard	philboard	1.2	cpe:2.3:a:philboard:philboard:1.2:::::::*
philboard	philboard	1.14	cpe:2.3:a:philboard:philboard:1.14:::::::*

References

secunia.com/advisories/30874

securityreason.com/securityalert/4621

www.securityfocus.com/bid/29998

exchange.xforce.ibmcloud.com/vulnerabilities/43451

www.exploit-db.com/exploits/5958

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Related for CVE-2008-5193