4.3

CVE-2008-1474

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Roundup-tracker ≫ Roundup Version <= 1.4.3
Roundup-tracker ≫ Roundup Version 0.1.0
Roundup-tracker ≫ Roundup Version 0.1.1
Roundup-tracker ≫ Roundup Version 0.1.2
Roundup-tracker ≫ Roundup Version 0.1.3
Roundup-tracker ≫ Roundup Version 0.2.0
Roundup-tracker ≫ Roundup Version 0.2.1
Roundup-tracker ≫ Roundup Version 0.2.2
Roundup-tracker ≫ Roundup Version 0.2.3
Roundup-tracker ≫ Roundup Version 0.2.4
Roundup-tracker ≫ Roundup Version 0.2.5
Roundup-tracker ≫ Roundup Version 0.2.6
Roundup-tracker ≫ Roundup Version 0.2.7
Roundup-tracker ≫ Roundup Version 0.2.8
Roundup-tracker ≫ Roundup Version 0.3.0
Roundup-tracker ≫ Roundup Version 0.3.0 Update pre1
Roundup-tracker ≫ Roundup Version 0.3.0 Update pre2
Roundup-tracker ≫ Roundup Version 0.3.0 Update pre3
Roundup-tracker ≫ Roundup Version 0.4.0
Roundup-tracker ≫ Roundup Version 0.4.0 Update b1
Roundup-tracker ≫ Roundup Version 0.4.0 Update b2
Roundup-tracker ≫ Roundup Version 0.4.1
Roundup-tracker ≫ Roundup Version 0.4.2
Roundup-tracker ≫ Roundup Version 0.4.2 Update pr1
Roundup-tracker ≫ Roundup Version 0.5
Roundup-tracker ≫ Roundup Version 0.5.0
Roundup-tracker ≫ Roundup Version 0.5.0 Update beta1
Roundup-tracker ≫ Roundup Version 0.5.0 Update beta2
Roundup-tracker ≫ Roundup Version 0.5.0 Update pr1
Roundup-tracker ≫ Roundup Version 0.5.1
Roundup-tracker ≫ Roundup Version 0.5.2
Roundup-tracker ≫ Roundup Version 0.5.3
Roundup-tracker ≫ Roundup Version 0.5.4
Roundup-tracker ≫ Roundup Version 0.5.5
Roundup-tracker ≫ Roundup Version 0.5.6
Roundup-tracker ≫ Roundup Version 0.5.7
Roundup-tracker ≫ Roundup Version 0.5.8 Update stable
Roundup-tracker ≫ Roundup Version 0.5.9
Roundup-tracker ≫ Roundup Version 0.6.0
Roundup-tracker ≫ Roundup Version 0.6.0 Update b1
Roundup-tracker ≫ Roundup Version 0.6.0 Update b2
Roundup-tracker ≫ Roundup Version 0.6.0 Update b3
Roundup-tracker ≫ Roundup Version 0.6.0 Update b4
Roundup-tracker ≫ Roundup Version 0.6.1
Roundup-tracker ≫ Roundup Version 0.6.2
Roundup-tracker ≫ Roundup Version 0.6.3
Roundup-tracker ≫ Roundup Version 0.6.4
Roundup-tracker ≫ Roundup Version 0.6.5
Roundup-tracker ≫ Roundup Version 0.6.6
Roundup-tracker ≫ Roundup Version 0.6.7
Roundup-tracker ≫ Roundup Version 0.6.8
Roundup-tracker ≫ Roundup Version 0.6.9
Roundup-tracker ≫ Roundup Version 0.6.10
Roundup-tracker ≫ Roundup Version 0.6.11
Roundup-tracker ≫ Roundup Version 0.7.0
Roundup-tracker ≫ Roundup Version 0.7.0 Update b1
Roundup-tracker ≫ Roundup Version 0.7.0 Update b2
Roundup-tracker ≫ Roundup Version 0.7.0 Update b3
Roundup-tracker ≫ Roundup Version 0.7.1
Roundup-tracker ≫ Roundup Version 0.7.2
Roundup-tracker ≫ Roundup Version 0.7.3
Roundup-tracker ≫ Roundup Version 0.7.4
Roundup-tracker ≫ Roundup Version 0.7.5
Roundup-tracker ≫ Roundup Version 0.7.6
Roundup-tracker ≫ Roundup Version 0.7.7
Roundup-tracker ≫ Roundup Version 0.7.8
Roundup-tracker ≫ Roundup Version 0.7.9
Roundup-tracker ≫ Roundup Version 0.7.10
Roundup-tracker ≫ Roundup Version 0.7.11
Roundup-tracker ≫ Roundup Version 0.7.12
Roundup-tracker ≫ Roundup Version 0.8.0
Roundup-tracker ≫ Roundup Version 0.8.0 Update b1
Roundup-tracker ≫ Roundup Version 0.8.0 Update b2
Roundup-tracker ≫ Roundup Version 0.8.1
Roundup-tracker ≫ Roundup Version 0.8.2
Roundup-tracker ≫ Roundup Version 0.8.3
Roundup-tracker ≫ Roundup Version 0.8.4
Roundup-tracker ≫ Roundup Version 0.8.5
Roundup-tracker ≫ Roundup Version 0.8.6
Roundup-tracker ≫ Roundup Version 0.9.0 Update b1
Roundup-tracker ≫ Roundup Version 1.0
Roundup-tracker ≫ Roundup Version 1.0.1
Roundup-tracker ≫ Roundup Version 1.1.0
Roundup-tracker ≫ Roundup Version 1.1.1
Roundup-tracker ≫ Roundup Version 1.1.2
Roundup-tracker ≫ Roundup Version 1.2.0
Roundup-tracker ≫ Roundup Version 1.2.1
Roundup-tracker ≫ Roundup Version 1.3.0
Roundup-tracker ≫ Roundup Version 1.3.1
Roundup-tracker ≫ Roundup Version 1.3.2
Roundup-tracker ≫ Roundup Version 1.3.3
Roundup-tracker ≫ Roundup Version 1.4.0
Roundup-tracker ≫ Roundup Version 1.4.1
Roundup-tracker ≫ Roundup Version 1.4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.5% 0.717
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup
Patch
Vendor Advisory
http://secunia.com/advisories/29336
Vendor Advisory
http://secunia.com/advisories/29375
Vendor Advisory
http://secunia.com/advisories/29848
Patch
Vendor Advisory
http://secunia.com/advisories/30274
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-21.xml
http://www.debian.org/security/2008/dsa-1554
http://www.securityfocus.com/bid/28239
Patch
http://www.vupen.com/english/advisories/2008/0891
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=436546
https://exchange.xforce.ibmcloud.com/vulnerabilities/41241
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html