4.3

CVE-2008-5786

Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Infrae ≫ Silva Version 1.0.2
Infrae ≫ Silva Version 1.0.3
Infrae ≫ Silva Version 1.1
Infrae ≫ Silva Version 1.1.1
Infrae ≫ Silva Version 1.1.2
Infrae ≫ Silva Version 1.1.4
Infrae ≫ Silva Version 1.1.5
Infrae ≫ Silva Version 1.1b1
Infrae ≫ Silva Version 1.1b2
Infrae ≫ Silva Version 1.2
Infrae ≫ Silva Version 1.2.1
Infrae ≫ Silva Version 1.2.2
Infrae ≫ Silva Version 1.2.3
Infrae ≫ Silva Version 1.2b1
Infrae ≫ Silva Version 1.3
Infrae ≫ Silva Version 1.3b3
Infrae ≫ Silva Version 1.4
Infrae ≫ Silva Version 1.4.1
Infrae ≫ Silva Version 1.4.2
Infrae ≫ Silva Version 1.4b1
Infrae ≫ Silva Version 1.5
Infrae ≫ Silva Version 1.5.2
Infrae ≫ Silva Version 1.5.3
Infrae ≫ Silva Version 1.5.4
Infrae ≫ Silva Version 1.5.5
Infrae ≫ Silva Version 1.5.6
Infrae ≫ Silva Version 1.5.7
Infrae ≫ Silva Version 1.5.8
Infrae ≫ Silva Version 1.5.9
Infrae ≫ Silva Version 1.5.10
Infrae ≫ Silva Version 1.5.12
Infrae ≫ Silva Version 1.5b1
Infrae ≫ Silva Version 1.6
Infrae ≫ Silva Version 1.6.1
Infrae ≫ Silva Version 1.6.2
Infrae ≫ Silva Version 1.6.3
Infrae ≫ Silva Version 1.6b3
Infrae ≫ Silva Version 1.6b4
Infrae ≫ Silva Version 2.0
Infrae ≫ Silva Version 2.0.1
Infrae ≫ Silva Version 2.0.2
Infrae ≫ Silva Version 2.0.3
Infrae ≫ Silva Version 2.0.4
Infrae ≫ Silva Version 2.0.5
Infrae ≫ Silva Version 2.0.6
Infrae ≫ Silva Version 2.0.7
Infrae ≫ Silva Version 2.0.8
Infrae ≫ Silva Version 2.0.9
Infrae ≫ Silva Version 2.0.10
Infrae ≫ Silva Version 2.0.12
Infrae ≫ Silva Version 2.0a1
Infrae ≫ Silva Version 2.0b1
Infrae ≫ Silva Version 2.1
Infrae ≫ Silva Version 2.1a2
Infrae ≫ Silva Version 2.1b1
Infrae ≫ Silva Find Version <= 1.1.5
Infrae ≫ Silva Find Version 0.1
Infrae ≫ Silva Find Version 0.1.1
Infrae ≫ Silva Find Version 0.1.2
Infrae ≫ Silva Find Version 1.0
Infrae ≫ Silva Find Version 1.1
Infrae ≫ Silva Find Version 1.1.1
Infrae ≫ Silva Find Version 1.1.1.2
Infrae ≫ Silva Find Version 1.1.1.3
Infrae ≫ Silva Find Version 1.1.2
Infrae ≫ Silva Find Version 1.1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.22% 0.648
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://holisticinfosec.org/content/view/91/45/
Patch
http://secunia.com/advisories/32585
Vendor Advisory
http://www.infrae.com/newsitems/silva_security_bulletin_08-11-07
Patch
http://www.osvdb.org/49659
http://www.securityfocus.com/bid/32183
https://exchange.xforce.ibmcloud.com/vulnerabilities/46427