Lucene search

MitreCVE-2008-5761

HistoryDec 30, 2008 - 8:30 p.m.

CVE-2008-5761

2008-12-3020:30:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-5761

cross-site scripting

xss

flatnux cms

flatnuke3

arbitrary web script

html

src attribute

iframe

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto parameter to photo.php in the 05_Foto module; or (3) the name parameter in an insertrecord action to index.php in the 08_Files module, as demonstrated by injection within a SRC attribute of an IFRAME element.

Affected configurations

Nvd

Node

flatnuxflatnuxMatch2008-12-11

VendorProductVersionCPE
flatnuxflatnux2008-12-11cpe:2.3:a:flatnux:flatnux:2008-12-11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
flatnux	flatnux	2008-12-11	cpe:2.3:a:flatnux:flatnux:2008-12-11:::::::*

References

secunia.com/advisories/33175

securityreason.com/securityalert/4825

www.securityfocus.com/bid/32826

www.securityfocus.com/bid/32828

exchange.xforce.ibmcloud.com/vulnerabilities/47367

exchange.xforce.ibmcloud.com/vulnerabilities/47369

www.exploit-db.com/exploits/7461

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON

Related for CVE-2008-5761