CVE-2008-4876 Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web scrip...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| philips electronics voip841 dect phone | = 1.0.4.48 | No fix listed |
| philips electronics voip841 dect phone | = 1.0.4.50 | No fix listed |
References
- 28978 third-party-advisory vendor-advisory
- 4536 third-party-advisory
- 20080214 Philips VOIP841 Multiple Vulnerabilities mailing-list
- 27790 vdb-entry
- ADV-2008-0583 vdb-entry
- 5113 exploit