CVE-2008-4663 Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via u...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kumacchi ks cgi access log | = 1.44 | No fix listed |
References
- JVN#46869708 third-party-advisory
- JVN#72065744 third-party-advisory
- JVNDB-2008-000043 third-party-advisory
- JVNDB-2008-000044 third-party-advisory
- www.kumacchi.com
- www.kumacchi.com
- accesslogkaiseki-analysis-xss(46053) vdb-entry