CVE-2008-5304 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.3 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:N/I:P/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 85%

Vendor	Product	Version
twiki	twiki	𝑥 ≤ 4.2.3
twiki	twiki	4.0.0
twiki	twiki	4.0.1
twiki	twiki	4.0.2
twiki	twiki	4.0.3
twiki	twiki	4.0.4
twiki	twiki	4.0.5
twiki	twiki	4.1.0
twiki	twiki	4.1.1
twiki	twiki	4.1.2
twiki	twiki	4.2.0
twiki	twiki	4.2.1
twiki	twiki	4.2.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

twiki

oneiric	dne
natty	dne
maverick	dne
lucid	dne
karmic	ignored
jaunty	ignored
intrepid	ignored
hardy	ignored
gutsy	ignored
dapper	ignored

Known Exploits!

Common Weakness Enumeration

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References

http://secunia.com/advisories/33040

http://securitytracker.com/id?1021351

http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304

http://www.securityfocus.com/bid/32669

http://www.vupen.com/english/advisories/2008/3381

https://exchange.xforce.ibmcloud.com/vulnerabilities/47122

http://secunia.com/advisories/33040

http://securitytracker.com/id?1021351

http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304

http://www.securityfocus.com/bid/32669

http://www.vupen.com/english/advisories/2008/3381

https://exchange.xforce.ibmcloud.com/vulnerabilities/47122