CVE-2008-3100

EUVD-2008-3090
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
owlintranet_knowledgebase
𝑥
≤ 0.95
owlintranet_knowledgebase
0.94
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
owl-dms
dapper
ignored
feisty
ignored
gutsy
ignored
hardy
ignored
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
Common Weakness Enumeration
References
http://secunia.com/advisories/31264
http://securityreason.com/securityalert/4057
http://www.datensalat.eu/~fabian/cve/CVE-2008-3100-Owl.html
http://www.securityfocus.com/archive/1/494843/100/0/threaded
http://www.securityfocus.com/bid/30410
http://www.vupen.com/english/advisories/2008/2209
https://exchange.xforce.ibmcloud.com/vulnerabilities/44053
http://secunia.com/advisories/31264
http://securityreason.com/securityalert/4057
http://www.datensalat.eu/~fabian/cve/CVE-2008-3100-Owl.html
http://www.securityfocus.com/archive/1/494843/100/0/threaded
http://www.securityfocus.com/bid/30410
http://www.vupen.com/english/advisories/2008/2209
https://exchange.xforce.ibmcloud.com/vulnerabilities/44053