5

CVE-2008-5647

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trac ≫ Trac
Trac ≫ Trac Version <= 0.11.2.1
Trac ≫ Trac Version 0.5
Trac ≫ Trac Version 0.5.1
Trac ≫ Trac Version 0.5.2
Trac ≫ Trac Version 0.6
Trac ≫ Trac Version 0.6.1
Trac ≫ Trac Version 0.7
Trac ≫ Trac Version 0.7.1
Trac ≫ Trac Version 0.8
Trac ≫ Trac Version 0.8.1
Trac ≫ Trac Version 0.8.2
Trac ≫ Trac Version 0.8.3
Trac ≫ Trac Version 0.8.4
Trac ≫ Trac Version 0.9
Trac ≫ Trac Version 0.9 Update b1
Trac ≫ Trac Version 0.9 Update b2
Trac ≫ Trac Version 0.9.1
Trac ≫ Trac Version 0.9.2
Trac ≫ Trac Version 0.9.3
Trac ≫ Trac Version 0.9.4
Trac ≫ Trac Version 0.9.5
Trac ≫ Trac Version 0.9.6
Trac ≫ Trac Version 0.10
Trac ≫ Trac Version 0.10.1
Trac ≫ Trac Version 0.10.2
Trac ≫ Trac Version 0.10.3
Trac ≫ Trac Version 0.10.3.1
Trac ≫ Trac Version 0.10.4
Trac ≫ Trac Version 0.10.5
Trac ≫ Trac Version 0.11
Trac ≫ Trac Version 0.11.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.07% 0.604
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://trac.edgewall.org/wiki/ChangeLog
http://secunia.com/advisories/32652
Vendor Advisory
http://www.securityfocus.com/bid/32226
http://www.vupen.com/english/advisories/2008/3080
https://exchange.xforce.ibmcloud.com/vulnerabilities/46491