CVE-2008-2178

Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation (aka an admin category search).
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
lifetypelifetype
1.2.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lifetype.net/post/2008/05/04/lifetype-1.2.8-released
http://secunia.com/advisories/30075
http://securityreason.com/securityalert/3871
http://wiki.lifetype.net/index.php/Release_notes_Lifetype_1.2.8
http://www.securityfocus.com/archive/1/491550/100/0/threaded
http://www.securityfocus.com/archive/1/491597/100/0/threaded
http://www.securityfocus.com/bid/29017
https://exchange.xforce.ibmcloud.com/vulnerabilities/42151
http://lifetype.net/post/2008/05/04/lifetype-1.2.8-released
http://secunia.com/advisories/30075
http://securityreason.com/securityalert/3871
http://wiki.lifetype.net/index.php/Release_notes_Lifetype_1.2.8
http://www.securityfocus.com/archive/1/491550/100/0/threaded
http://www.securityfocus.com/archive/1/491597/100/0/threaded
http://www.securityfocus.com/bid/29017
https://exchange.xforce.ibmcloud.com/vulnerabilities/42151