CVE-2008-3730

Nordicwind Document Management System <3.2.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (5)

[Third Party Advisory, VDB Entry] http://osvdb.org/47558

[Vendor Advisory] http://secunia.com/advisories/31543

[Various Sources] http://www.nordicwind.ca/noah/bugs/inputval.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/44535

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/30747

Scores

EPSS 0.0033

EPSS Percentile 55.5%

Classification

CWE

CWE-79

Status draft

Affected Products (34)

nordicwind/noah < 3.2.1

nordicwind/noah

... and 19 more

Timeline

Published Aug 20, 2008

Tracked Since Feb 18, 2026