CVE-2008-5304

Опубликовано: 10 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable.

Ссылки

http://secunia.com/advisories/33040
Vendor Advisory
http://securitytracker.com/id?1021351
http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304
Patch
Vendor Advisory
http://www.securityfocus.com/bid/32669
Exploit
http://www.vupen.com/english/advisories/2008/3381
https://exchange.xforce.ibmcloud.com/vulnerabilities/47122
http://secunia.com/advisories/33040
Vendor Advisory
http://securitytracker.com/id?1021351
http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304
Patch
Vendor Advisory
http://www.securityfocus.com/bid/32669
Exploit
http://www.vupen.com/english/advisories/2008/3381
https://exchange.xforce.ibmcloud.com/vulnerabilities/47122

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*

Версия до 4.2.3 (включая)

cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*

cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05148

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-5304

ubuntu

около 17 лет назад

Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable.

CVE-2008-5304

debian

около 17 лет назад

Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows ...

GHSA-g9jv-cq4v-r3gc

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable.

EPSS

Процентиль: 90%

0.05148

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79