CVEvulnerability
CVE-2008-4083
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-09-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information.
Affected configurations
• brim-project brim 2.0.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/31661 Vendor Advisory
- http://securityreason.com/securityalert/4251 securityreason.com
- http://www.securityfocus.com/bid/30944 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44790 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6332 www.exploit-db.com
- http://secunia.com/advisories/31661 Vendor Advisory
- http://securityreason.com/securityalert/4251 securityreason.com
- http://www.securityfocus.com/bid/30944 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44790 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6332 www.exploit-db.com