31425Third-party advisory
http://secunia.com/advisories/31425 CVE-2008-3917
Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting
Record summary
CVE-2008-3917 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOvidentia 6.6.5 - 'index.php' Cross-Site ScriptingExploitDB exploitby ThE dE@ThNot analyzed1 file
References
64219Third-party advisory
http://securityreason.com/securityalert/4219 20080818 Ovidentia 6.6.5 XSS (index.php)‏mailing list
http://www.securityfocus.com/archive/1/495562/100/0/threaded 30735vdb entry
http://www.securityfocus.com/bid/30735 ovidentia-index-xss(45064)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45064 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-3917