4.3

CVE-2008-5786

Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Infrae ≫ Silva Version1.0.2
Infrae ≫ Silva Version1.0.3
Infrae ≫ Silva Version1.1
Infrae ≫ Silva Version1.1.1
Infrae ≫ Silva Version1.1.2
Infrae ≫ Silva Version1.1.4
Infrae ≫ Silva Version1.1.5
Infrae ≫ Silva Version1.1b1
Infrae ≫ Silva Version1.1b2
Infrae ≫ Silva Version1.2
Infrae ≫ Silva Version1.2.1
Infrae ≫ Silva Version1.2.2
Infrae ≫ Silva Version1.2.3
Infrae ≫ Silva Version1.2b1
Infrae ≫ Silva Version1.3
Infrae ≫ Silva Version1.3b3
Infrae ≫ Silva Version1.4
Infrae ≫ Silva Version1.4.1
Infrae ≫ Silva Version1.4.2
Infrae ≫ Silva Version1.4b1
Infrae ≫ Silva Version1.5
Infrae ≫ Silva Version1.5.2
Infrae ≫ Silva Version1.5.3
Infrae ≫ Silva Version1.5.4
Infrae ≫ Silva Version1.5.5
Infrae ≫ Silva Version1.5.6
Infrae ≫ Silva Version1.5.7
Infrae ≫ Silva Version1.5.8
Infrae ≫ Silva Version1.5.9
Infrae ≫ Silva Version1.5.10
Infrae ≫ Silva Version1.5.12
Infrae ≫ Silva Version1.5b1
Infrae ≫ Silva Version1.6
Infrae ≫ Silva Version1.6.1
Infrae ≫ Silva Version1.6.2
Infrae ≫ Silva Version1.6.3
Infrae ≫ Silva Version1.6b3
Infrae ≫ Silva Version1.6b4
Infrae ≫ Silva Version2.0
Infrae ≫ Silva Version2.0.1
Infrae ≫ Silva Version2.0.2
Infrae ≫ Silva Version2.0.3
Infrae ≫ Silva Version2.0.4
Infrae ≫ Silva Version2.0.5
Infrae ≫ Silva Version2.0.6
Infrae ≫ Silva Version2.0.7
Infrae ≫ Silva Version2.0.8
Infrae ≫ Silva Version2.0.9
Infrae ≫ Silva Version2.0.10
Infrae ≫ Silva Version2.0.12
Infrae ≫ Silva Version2.0a1
Infrae ≫ Silva Version2.0b1
Infrae ≫ Silva Version2.1
Infrae ≫ Silva Version2.1a2
Infrae ≫ Silva Version2.1b1
Infrae ≫ Silva Find Version <= 1.1.5
Infrae ≫ Silva Find Version0.1
Infrae ≫ Silva Find Version0.1.1
Infrae ≫ Silva Find Version0.1.2
Infrae ≫ Silva Find Version1.0
Infrae ≫ Silva Find Version1.1
Infrae ≫ Silva Find Version1.1.1
Infrae ≫ Silva Find Version1.1.1.2
Infrae ≫ Silva Find Version1.1.1.3
Infrae ≫ Silva Find Version1.1.2
Infrae ≫ Silva Find Version1.1.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.62
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.