CVE-2008-4571 in Plone信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2008-10-15

披露

2008-10-15

管理

已接受

条目

VDB-44537

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.01144

KEV

否

活动

非常低

部门

Hostingprovider, Agriculture, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2008-4571
NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-4571
CVE Details	https://www.cvedetails.com/cve/CVE-2008-4571/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!