CVE-2008-0723

Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
planetlucmynews
𝑥
≤ 1.6.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://marc.info/?l=full-disclosure&m=120232523420188&w=2
http://marc.info/?l=full-disclosure&m=120235668406688&w=2
http://www.securityfocus.com/bid/27652
http://marc.info/?l=full-disclosure&m=120232523420188&w=2
http://marc.info/?l=full-disclosure&m=120235668406688&w=2
http://www.securityfocus.com/bid/27652