VulnerabilityModified
CVE-2008-1985
Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.
MEDIUM 4.3EPSS 1.46%
Does this matter?
Lower severity and a low EPSS score (1.46%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.46% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- digital hive/digitalhive
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/28918Exploit
- http://www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42006
- http://www.securityfocus.com/bid/28918Exploit
- http://www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42006
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.