CVEvulnerability
CVE-2008-4876
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page.
Affected configurations
• philips electronics voip841 dect phone 1.0.4.48
• philips electronics voip841 dect phone 1.0.4.50
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/28978 Vendor Advisory
- http://securityreason.com/securityalert/4536 securityreason.com
- http://www.securityfocus.com/archive/1/488127/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27790 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0583 www.vupen.com
- https://www.exploit-db.com/exploits/5113 www.exploit-db.com
- http://secunia.com/advisories/28978 Vendor Advisory
- http://securityreason.com/securityalert/4536 securityreason.com
- http://www.securityfocus.com/archive/1/488127/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27790 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0583 www.vupen.com
- https://www.exploit-db.com/exploits/5113 www.exploit-db.com