CVEvulnerability
CVE-2008-4663
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-10-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• kumacchi ks cgi access log 1.44
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN46869708/index.html jvn.jp
- http://jvn.jp/en/jp/JVN72065744/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000043.html jvndb.jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000044.html jvndb.jvn.jp
- http://www.kumacchi.com/cgiroom/cgis/accesslogex/accesslogex.html www.kumacchi.com
- http://www.kumacchi.com/cgiroom/index.html www.kumacchi.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46053 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN46869708/index.html jvn.jp
- http://jvn.jp/en/jp/JVN72065744/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000043.html jvndb.jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000044.html jvndb.jvn.jp
- http://www.kumacchi.com/cgiroom/cgis/accesslogex/accesslogex.html www.kumacchi.com
- http://www.kumacchi.com/cgiroom/index.html www.kumacchi.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46053 exchange.xforce.ibmcloud.com