CVE-2008-0828

Опубликовано: 19 фев. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*

Версия до 1.5.5 (включая)

cpe:2.3:a:atutor:atutor:0.9.6:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.0:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.1:pl1:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.1:pl2:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3:rc2:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.4:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-9x27-8843-xh8f

github

почти 4 года назад