CVE-2008-3709

{"id": "CVE-2008-3709", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-08-19T19:41:00.000", "references": [{"url": "http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt", "source": "cve@mitre.org"}, {"url": "http://www.attrition.org/pipermail/vim/2008-August/002052.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/30688", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44476", "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.attrition.org/pipermail/vim/2008-August/002052.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/30688", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44476", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2) lNavAdminOptions, or (3) lNavReturn parameter to options.php; or the (4) lNavReturn parameter to subscribe.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de Secuencias de comandos en sitios cruzados en CyBoards PHP Lite 1.21, permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente a trav\u00e9s de (1) lOptionsOptions, (2) lNavAdminOptions, o (3) lNavReturn parameter de options.php; o el par\u00e1metro (4) lNavReturn de subscribe.php."}], "lastModified": "2024-11-21T00:49:55.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hotscripts:cyboards_php_lite:1.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7F729C1-C260-4FFA-9D2C-F62C40244910"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}