CVE-2008-3328

Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
edgewall_softwaretrac
𝑥
≤ 0.10.4
edgewall_softwaretrac
0.5
edgewall_softwaretrac
0.5.1
edgewall_softwaretrac
0.5.2
edgewall_softwaretrac
0.6
edgewall_softwaretrac
0.6.1
edgewall_softwaretrac
0.7
edgewall_softwaretrac
0.7.1
edgewall_softwaretrac
0.8
edgewall_softwaretrac
0.8.1
edgewall_softwaretrac
0.8.2
edgewall_softwaretrac
0.8.3
edgewall_softwaretrac
0.8.4
edgewall_softwaretrac
0.9
edgewall_softwaretrac
0.9.1
edgewall_softwaretrac
0.9.2
edgewall_softwaretrac
0.9.3
edgewall_softwaretrac
0.9.4
edgewall_softwaretrac
0.9.5
edgewall_softwaretrac
0.9.6
edgewall_softwaretrac
0.9b1:b1
edgewall_softwaretrac
0.9b2:b2
edgewall_softwaretrac
0.10
edgewall_softwaretrac
0.10.1
edgewall_softwaretrac
0.10.2
edgewall_softwaretrac
0.10.3
edgewall_softwaretrac
0.10.3.1
edgewall_softwaretrac
0.50.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
trac
sid
1.6-2
fixed
trixie
1.6-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
trac
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
ignored
gutsy
ignored
feisty
ignored
dapper
ignored