VulnerabilityModified
CVE-2008-2508
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML via the "nb" parameter in voir mode.
MEDIUM 4.3EPSS 1.44%
Does this matter?
Lower severity and a low EPSS score (1.44%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML via the "nb" parameter in voir mode.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.44% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- tr script news/tr script news
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/29388Exploit
- http://www.z0rlu.ownspace.org/index.php?/archives/91-TR-News-v2.1-xss.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42648
- http://www.securityfocus.com/bid/29388Exploit
- http://www.z0rlu.ownspace.org/index.php?/archives/91-TR-News-v2.1-xss.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42648
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.