Lucene search

MitreCVE-2008-5487

HistoryDec 12, 2008 - 4:30 p.m.

CVE-2008-5487

2008-12-1216:30:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-5487

cross-site scripting

xss vulnerability

turnkeyforms text link sales

admin.php

web security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected configurations

Nvd

Node

turnkeyformstext_link_sales

VendorProductVersionCPE
turnkeyformstext_link_sales*cpe:2.3:a:turnkeyforms:text_link_sales:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
turnkeyforms	text_link_sales	*	cpe:2.3:a:turnkeyforms:text_link_sales::::::::

References

secunia.com/advisories/32732

securityreason.com/securityalert/4719

www.securityfocus.com/bid/32308

exchange.xforce.ibmcloud.com/vulnerabilities/46632

www.exploit-db.com/exploits/7124

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Related for CVE-2008-5487