CVE-2008-3596 Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be render...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| harmoni | <= 1.4.6 | No fix listed |
| harmoni | = 0.0.2-beta | No fix listed |
| harmoni | = 0.0.3-beta | No fix listed |
| harmoni | = 0.0.4 | No fix listed |
| harmoni | = 0.0.5 | No fix listed |
| harmoni | = 0.1.0 | No fix listed |
| harmoni | = 0.2.0 | No fix listed |
| harmoni | = 0.3.0 | No fix listed |
| harmoni | = 0.3.1 | No fix listed |
| harmoni | = 0.3.2 | No fix listed |
| harmoni | = 0.5.1 | No fix listed |
| harmoni | = 0.6.0 | No fix listed |
| harmoni | = 0.6.2 | No fix listed |
| harmoni | = 0.7.0 | No fix listed |
| harmoni | = 0.7.1 | No fix listed |
| harmoni | = 0.7.2 | No fix listed |
| harmoni | = 0.7.6 | No fix listed |
| harmoni | = 0.7.7 | No fix listed |
| harmoni | = 0.9.0 | No fix listed |
| harmoni | = 0.10.1 | No fix listed |
| harmoni | = 0.11.0 | No fix listed |
| harmoni | = 0.12.0 | No fix listed |
| harmoni | = 0.12.1 | No fix listed |
| harmoni | = 0.12.3 | No fix listed |
| harmoni | = 0.13.0 | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| harmoni | = 0.13.1 | No fix listed |
| harmoni | = 0.13.2 | No fix listed |
| harmoni | = 0.13.3 | No fix listed |
| harmoni | = 0.13.4 | No fix listed |
| harmoni | = 0.13.5 | No fix listed |
| harmoni | = 0.13.6 | No fix listed |
| harmoni | = 0.13.7 | No fix listed |
| harmoni | = 1.0.0 | No fix listed |
| harmoni | = 1.0.1 | No fix listed |
| harmoni | = 1.0.2 | No fix listed |
| harmoni | = 1.0.3 | No fix listed |
| harmoni | = 1.0.5 | No fix listed |
| harmoni | = 1.0.6 | No fix listed |
| harmoni | = 1.1.0 | No fix listed |
| harmoni | = 1.3.0 | No fix listed |
| harmoni | = 1.3.2 | No fix listed |
| harmoni | = 1.3.4 | No fix listed |
| harmoni | = 1.3.5 | No fix listed |
| harmoni | = 1.4.2 | No fix listed |
References
- 31406 third-party-advisory vendor-advisory
- sourceforge.net exploit
- 30637 vdb-entry
- harmoni-username-xss(44394) vdb-entry