VulnerabilityModified
CVE-2008-3739
Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving…
MEDIUM 4.3EPSS 1.53%
Does this matter?
Lower severity and a low EPSS score (1.53%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.53% probability · 73th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- spacetag/lacoodast · system consultants/la cooda wiz
- Source
- cve@mitre.org
References
- http://jvn.jp/en/jp/JVN27417220/index.html
- http://jvn.jp/en/jp/JVN52557009/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html
- http://secunia.com/advisories/31574Vendor Advisory
- http://secunia.com/advisories/31582Vendor Advisory
- http://wiz.syscon.co.jp/Details.htm
- http://www.securityfocus.com/bid/30791
- http://www.spacetag.jp/modules/products/index.php?id=54
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44593
- http://jvn.jp/en/jp/JVN27417220/index.html
- http://jvn.jp/en/jp/JVN52557009/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html
- http://secunia.com/advisories/31574Vendor Advisory
- http://secunia.com/advisories/31582Vendor Advisory
- http://wiz.syscon.co.jp/Details.htm
- http://www.securityfocus.com/bid/30791
- http://www.spacetag.jp/modules/products/index.php?id=54
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44593
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.