VulnerabilityModified
CVE-2008-0775
Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired…
MEDIUM 4.3EPSS 1.22%
Does this matter?
Lower severity and a low EPSS score (1.22%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired script, and end with ";".
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.22% probability · 67th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- simple machines/smf shoutbox
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/28900
- http://securityreason.com/securityalert/3651
- http://www.securityfocus.com/archive/1/487912/100/0/threaded
- http://www.securityfocus.com/archive/1/489964/100/0/threaded
- http://www.securityfocus.com/archive/1/491357/100/0/threaded
- http://www.securityfocus.com/bid/27727
- http://secunia.com/advisories/28900
- http://securityreason.com/securityalert/3651
- http://www.securityfocus.com/archive/1/487912/100/0/threaded
- http://www.securityfocus.com/archive/1/489964/100/0/threaded
- http://www.securityfocus.com/archive/1/491357/100/0/threaded
- http://www.securityfocus.com/bid/27727
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.