CVE-2008-4446 Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nucleus cms nucleus | <= 3.31 | No fix listed |
References
- japan.nucleuscms.org issue-tracking vendor-advisory
- japan.nucleuscms.org vendor-advisory
- JVN#92651529 third-party-advisory vdb-entry
- JVNDB-2008-000066 third-party-advisory vdb-entry
- 32123 third-party-advisory
- 31590 third-party-advisory vdb-entry
- nucleuseucjp-unspecified-xss(45666) third-party-advisory vdb-entry