CVE-2008-4076 Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows r...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tor world interactive bbs | <= 1.57 | No fix listed |
| tor world simple bbs | <= 1.86 | No fix listed |
| tor world simple bbs | = 1.3 | No fix listed |
| tor world topics bbs | <= 1.11 | No fix listed |
| tor world tor board | <= 1.3 | No fix listed |
| tor world tor board | = 1.1 | No fix listed |
References
- download.torworld.com patch
- JVN#18616622 third-party-advisory
- 31835 third-party-advisory
- 31105 patch vdb-entry
- tor-world-multiple-unspecified-xss(45043) vdb-entry