CVE-2008-5399
Published Dec 10, 2008
Last updated 9 months ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:*:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03DC374E-FC63-4F75-A506-9CBA0CC680AD",
"versionEndIncluding": "1.2"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C451367-C9A9-4D35-B873-DBF1884B405A"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F9B9221-C1EA-4C76-B9E5-A6D79AE5D7C7"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD68AA01-B64F-4A9A-A542-807D58CD2389"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66AFBB80-EA66-4C0B-93DB-6294733CD107"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA2751D2-7F4D-480F-B646-AF8DDB72BF6B"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc3_01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09B0F1B0-BFBA-4549-B140-3FAD86820369"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "008038D2-7B8E-43DF-95D7-FD425710DD78"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.0.2.:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "352C4C7D-13C8-4063-923D-8968ECD141EE"
},
{
"criteria": "cpe:2.3:a:mvnforum:mvnforum:1.1:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BD947A2-2FA1-443A-A213-47FF1C76A188"
}
],
"operator": "OR"
}
]
}
]