VulnerabilityModified
CVE-2008-1787
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) text and (2) ul parameters.
MEDIUM 4.3EPSS 1.47%
Does this matter?
Lower severity and a low EPSS score (1.47%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) text and (2) ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.47% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- poplar gedcom viewer/poplar gedcom viewer
- Source
- cve@mitre.org
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/28608.html
- http://secunia.com/advisories/23761Vendor Advisory
- http://www.securityfocus.com/bid/28608Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41689
- http://downloads.securityfocus.com/vulnerabilities/exploits/28608.html
- http://secunia.com/advisories/23761Vendor Advisory
- http://www.securityfocus.com/bid/28608Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41689
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.