CVEvulnerability
CVE-2008-3023
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799.
Affected configurations
• fswiki freestyle wiki (<= 3.6.2)
• fswiki freestyle wiki (<= 3.6.3)
• microsoft internet explorer
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3 fswiki.org
- http://jvn.jp/en/jp/JVN77432756/index.html Third Party Advisory
- http://jvn.jp/jp/JVN77432756/index.html Third Party Advisory
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30923 Vendor Advisory
- http://www.securityfocus.com/bid/30071 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43574 Third Party Advisory, VDB Entry
- http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3 fswiki.org
- http://jvn.jp/en/jp/JVN77432756/index.html Third Party Advisory
- http://jvn.jp/jp/JVN77432756/index.html Third Party Advisory
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30923 Vendor Advisory
- http://www.securityfocus.com/bid/30071 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43574 Third Party Advisory, VDB Entry