Lucene search

K
nvd[email protected]NVD:CVE-2008-0505
HistoryJan 31, 2008 - 8:00 p.m.

CVE-2008-0505

2008-01-3120:00:00
CWE-79
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters.

Affected configurations

NVD
Node
copperminecoppermine_photo_galleryRange1.4.14
OR
copperminecoppermine_photo_galleryMatch1.4.10
OR
copperminecoppermine_photo_galleryMatch1.4.11
OR
copperminecoppermine_photo_galleryMatch1.4.12
OR
copperminecoppermine_photo_galleryMatch1.4.13

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%