CVE-2008-1470
IISWebAgentIF.dll - XSS
Title source: llmDescription
Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier, allows remote attackers to conduct cross-site scripting (XSS) attacks via the postdata parameter, due to an incomplete fix for CVE-2005-1118.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by quentin.berdugo · textwebappscgi
https://www.exploit-db.com/exploits/31411
exploitdb
WORKING POC
VERIFIED
by s4squatch · textwebappsmultiple
https://www.exploit-db.com/exploits/11405
Scores
EPSS
0.0051
EPSS Percentile
66.0%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
rsa/webid
Timeline
Published
Mar 24, 2008
Tracked Since
Feb 18, 2026