Lucene search

K
cveMitreCVE-2008-5971
HistoryJan 27, 2009 - 1:30 a.m.

CVE-2008-5971

2009-01-2701:30:00
CWE-79
mitre
web.nvd.nist.gov
29
cve-2008-5971
xss
profile_social.php
i-net solution orkut clone
remote authentication

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

55.4%

Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter.

Affected configurations

Nvd
Node
i-netsolutionorkut_cloneMatch_nil_
VendorProductVersionCPE
i-netsolutionorkut_clone_nil_cpe:2.3:a:i-netsolution:orkut_clone:_nil_:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

55.4%

Related for CVE-2008-5971