CVE-2008-5729 Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) form and (2) control parameters to FCKedit...
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) form and (2) control parameters to FCKeditor/neditor.php, and the (3) path parameter to admin/siteinfo/iframe.inc.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netcat | <= 3.12 | No fix listed |
| netcat | = 1.1 | No fix listed |
| netcat | = 2.0 | No fix listed |
| netcat | = 2.1 | No fix listed |
| netcat | = 2.2 | No fix listed |
| netcat | = 2.3 | No fix listed |
| netcat | = 2.4 | No fix listed |
| netcat | = 3.0 | No fix listed |
References
- 4819 third-party-advisory
- 32992 exploit vdb-entry
- netcat-iframe-neditor-xss(47577) vdb-entry
- 7560 exploit