CVEvulnerability
CVE-2008-6113
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-02-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the (1) username and (2) profile page.
Affected configurations
• semanticscuttle semanticscuttle (<= 0.89)
• semanticscuttle semanticscuttle 0.85
• semanticscuttle semanticscuttle 0.86
• semanticscuttle semanticscuttle 0.87
• semanticscuttle semanticscuttle 0.88
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/32722 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=640424 sourceforge.net
- http://www.securityfocus.com/bid/32409 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46754 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32722 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=640424 sourceforge.net
- http://www.securityfocus.com/bid/32409 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46754 exchange.xforce.ibmcloud.com