Lucene search
HistoryJul 31, 2008 - 4:41 p.m.
CVE-2008-3398
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.003
Percentile
65.8%
Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129.
Affected configurations
Node
xrmsxrms_crmMatch1.99.2
Related
cve
cve
prion
prion
Cross site scripting
2008-07-31 16:41:00
Cross site scripting
2008-03-04 00:44:00
Cross site scripting
2008-09-05 16:08:00
cvelist
cvelist
exploitdb
exploitdb
XRms 1.99.2 - CRM 'msg' Cross-Site Scripting
2008-02-28 00:00:00
nvd
nvd
CVE-2008-1129
2008-03-04 00:44:00
CVE-2008-3664
2008-09-05 16:08:00
securityvulns
securityvulns
packetstorm
packetstorm
xrms-sqlxss.txt
2008-09-04 00:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.003
Percentile
65.8%
Related for NVD:CVE-2008-3398