4.3
CVE-2008-0919
- EPSS 3.75%
- Veröffentlicht 22.02.2008 23:44:00
- Zuletzt bearbeitet 16.06.2026 22:50:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Open Source Security Information Management ≫ Os-sim Version0.1alpha
Open Source Security Information Management ≫ Os-sim Version0.2alpha
Open Source Security Information Management ≫ Os-sim Version0.3.1alpha
Open Source Security Information Management ≫ Os-sim Version0.3alpha
Open Source Security Information Management ≫ Os-sim Version0.5.1
Open Source Security Information Management ≫ Os-sim Version0.5.2
Open Source Security Information Management ≫ Os-sim Version0.6
Open Source Security Information Management ≫ Os-sim Version0.6.2
Open Source Security Information Management ≫ Os-sim Version0.6.3
Open Source Security Information Management ≫ Os-sim Version0.7
Open Source Security Information Management ≫ Os-sim Version0.7.1
Open Source Security Information Management ≫ Os-sim Version0.8
Open Source Security Information Management ≫ Os-sim Version0.9
Open Source Security Information Management ≫ Os-sim Version0.9.1
Open Source Security Information Management ≫ Os-sim Version0.9.2
Open Source Security Information Management ≫ Os-sim Version0.9.3
Open Source Security Information Management ≫ Os-sim Version0.9.4
Open Source Security Information Management ≫ Os-sim Version0.9.5
Open Source Security Information Management ≫ Os-sim Version0.9.6
Open Source Security Information Management ≫ Os-sim Version0.9.7
Open Source Security Information Management ≫ Os-sim Version0.9.8
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc1
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc2
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc3
Open Source Security Information Management ≫ Os-sim Version0.9.9_rc4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.75% | 0.885 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://osvdb.org/42006
http://secunia.com/advisories/29046
http://securityreason.com/securityalert/3689
http://www.securityfocus.com/archive/1/488450/100/0/threaded
http://www.securityfocus.com/archive/1/488617/100/0/threaded
http://www.securityfocus.com/archive/1/488697/100/0/threaded
http://www.securityfocus.com/bid/27929
https://www.exploit-db.com/exploits/5171