CVE-2008-0808

EUVD-2008-0815
Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script or HTML via meta tags.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
ikiwikiikiwiki
𝑥
≤ 1.46
ikiwikiikiwiki
1.33.3
ikiwikiikiwiki
2.31
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ikiwiki
bookworm
3.20200202.3-1
fixed
bullseye
3.20200202.3-1
fixed
sid
3.20200202.4-2.1
fixed
trixie
3.20200202.4-2.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ikiwiki
dapper
dne
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
Fixed 2.32.3
released
intrepid
Fixed 2.32.3
released
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465110
http://ikiwiki.info/security/#index30h2
http://secunia.com/advisories/28911
http://secunia.com/advisories/29369
http://www.debian.org/security/2008/dsa-1523
http://www.securityfocus.com/bid/27760
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465110
http://ikiwiki.info/security/#index30h2
http://secunia.com/advisories/28911
http://secunia.com/advisories/29369
http://www.debian.org/security/2008/dsa-1523
http://www.securityfocus.com/bid/27760