Lucene search

MitreCVE-2008-6764

HistoryApr 28, 2009 - 4:30 p.m.

CVE-2008-6764

2009-04-2816:30:03

CWE-79

mitre

web.nvd.nist.gov

cve-2008-6764

xss

web script injection

html injection

silentum loginsys 1.0.0

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.005

Percentile

76.0%

JSON

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected configurations

Nvd

Node

hypersilencesilentum_loginsysMatch1.0.0

VendorProductVersionCPE
hypersilencesilentum_loginsys1.0.0cpe:2.3:a:hypersilence:silentum_loginsys:1.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hypersilence	silentum_loginsys	1.0.0	cpe:2.3:a:hypersilence:silentum_loginsys:1.0.0:::::::*

References

maximilianosoler.com.ar/vulns/XSS-Silentum_LoginSys.txt

secunia.com/advisories/31801

www.osvdb.org/47940

www.securityfocus.com/bid/31055

exchange.xforce.ibmcloud.com/vulnerabilities/44925

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.005

Percentile

76.0%

JSON

Related for CVE-2008-6764