CVE-2008-1985

2008-04-2721:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.

References

www.securityfocus.com/bid/28918

www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.html

exchange.xforce.ibmcloud.com/vulnerabilities/42006