CVE-2008-3255

Опубликовано: 22 июл. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://jvn.jp/en/jp/JVN49704543/index.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/31042
Third Party Advisory
http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni
Broken Link
http://www.securityfocus.com/bid/30283
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43879
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN49704543/index.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/31042
Third Party Advisory
http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni
Broken Link
http://www.securityfocus.com/bid/30283
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43879
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ln-lab:webproxy:1.7:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.4:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.5:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.6:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.7:*:*:*:*:*:*:*

cpe:2.3:a:ln-lab:webproxy:1.7.8:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00406

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hjph-3frw-rvch

github

почти 4 года назад