4.3
CVE-2008-0919
- EPSS 7.2%
- Veröffentlicht 22.02.2008 23:44:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Open Source Security Information Management ≫ Os-sim Version0.1alpha
Open Source Security Information Management ≫ Os-sim Version0.2alpha
Open Source Security Information Management ≫ Os-sim Version0.3.1alpha
Open Source Security Information Management ≫ Os-sim Version0.3alpha
Open Source Security Information Management ≫ Os-sim Version0.5.1
Open Source Security Information Management ≫ Os-sim Version0.5.2
Open Source Security Information Management ≫ Os-sim Version0.6
Open Source Security Information Management ≫ Os-sim Version0.6.2
Open Source Security Information Management ≫ Os-sim Version0.6.3
Open Source Security Information Management ≫ Os-sim Version0.7
Open Source Security Information Management ≫ Os-sim Version0.7.1
Open Source Security Information Management ≫ Os-sim Version0.8
Open Source Security Information Management ≫ Os-sim Version0.9
Open Source Security Information Management ≫ Os-sim Version0.9.1
Open Source Security Information Management ≫ Os-sim Version0.9.2
Open Source Security Information Management ≫ Os-sim Version0.9.3
Open Source Security Information Management ≫ Os-sim Version0.9.4
Open Source Security Information Management ≫ Os-sim Version0.9.5
Open Source Security Information Management ≫ Os-sim Version0.9.6
Open Source Security Information Management ≫ Os-sim Version0.9.7
Open Source Security Information Management ≫ Os-sim Version0.9.8
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc1
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc2
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc3
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.2% | 0.908 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.