CVE-2008-5591 Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "logi...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iwrite nightfall personal diary | = 1.0 | No fix listed |
References
- 33011 third-party-advisory vendor-advisory
- 4742 third-party-advisory
- 32658 vdb-entry
- nightfallpd-login-xss(47110) vdb-entry
- 7351 exploit