CVE-2008-5786 Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to i...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infrae silva | = 1.0.2 | No fix listed |
| infrae silva | = 1.0.3 | No fix listed |
| infrae silva | = 1.1 | No fix listed |
| infrae silva | = 1.1.1 | No fix listed |
| infrae silva | = 1.1.2 | No fix listed |
| infrae silva | = 1.1.4 | No fix listed |
| infrae silva | = 1.1.5 | No fix listed |
| infrae silva | = 1.1b1 | No fix listed |
| infrae silva | = 1.1b2 | No fix listed |
| infrae silva | = 1.2 | No fix listed |
| infrae silva | = 1.2.1 | No fix listed |
| infrae silva | = 1.2.2 | No fix listed |
| infrae silva | = 1.2.3 | No fix listed |
| infrae silva | = 1.2b1 | No fix listed |
| infrae silva | = 1.3 | No fix listed |
| infrae silva | = 1.3b3 | No fix listed |
| infrae silva | = 1.4 | No fix listed |
| infrae silva | = 1.4.1 | No fix listed |
| infrae silva | = 1.4.2 | No fix listed |
| infrae silva | = 1.4b1 | No fix listed |
| infrae silva | = 1.5 | No fix listed |
| infrae silva | = 1.5.2 | No fix listed |
| infrae silva | = 1.5.3 | No fix listed |
| infrae silva | = 1.5.4 | No fix listed |
| infrae silva | = 1.5.5 | No fix listed |
Show 41 more
| Product | Affected versions | Fixed in |
|---|---|---|
| infrae silva | = 1.5.6 | No fix listed |
| infrae silva | = 1.5.7 | No fix listed |
| infrae silva | = 1.5.8 | No fix listed |
| infrae silva | = 1.5.9 | No fix listed |
| infrae silva | = 1.5.10 | No fix listed |
| infrae silva | = 1.5.12 | No fix listed |
| infrae silva | = 1.5b1 | No fix listed |
| infrae silva | = 1.6 | No fix listed |
| infrae silva | = 1.6.1 | No fix listed |
| infrae silva | = 1.6.2 | No fix listed |
| infrae silva | = 1.6.3 | No fix listed |
| infrae silva | = 1.6b3 | No fix listed |
| infrae silva | = 1.6b4 | No fix listed |
| infrae silva | = 2.0 | No fix listed |
| infrae silva | = 2.0.1 | No fix listed |
| infrae silva | = 2.0.2 | No fix listed |
| infrae silva | = 2.0.3 | No fix listed |
| infrae silva | = 2.0.4 | No fix listed |
| infrae silva | = 2.0.5 | No fix listed |
| infrae silva | = 2.0.6 | No fix listed |
| infrae silva | = 2.0.7 | No fix listed |
| infrae silva | = 2.0.8 | No fix listed |
| infrae silva | = 2.0.9 | No fix listed |
| infrae silva | = 2.0.10 | No fix listed |
| infrae silva | = 2.0.12 | No fix listed |
| infrae silva | = 2.0a1 | No fix listed |
| infrae silva | = 2.0b1 | No fix listed |
| infrae silva | = 2.1 | No fix listed |
| infrae silva | = 2.1a2 | No fix listed |
| infrae silva | = 2.1b1 | No fix listed |
| infrae silva find | <= 1.1.5 | No fix listed |
| infrae silva find | = 0.1 | No fix listed |
| infrae silva find | = 0.1.1 | No fix listed |
| infrae silva find | = 0.1.2 | No fix listed |
| infrae silva find | = 1.0 | No fix listed |
| infrae silva find | = 1.1 | No fix listed |
| infrae silva find | = 1.1.1 | No fix listed |
| infrae silva find | = 1.1.1.2 | No fix listed |
| infrae silva find | = 1.1.1.3 | No fix listed |
| infrae silva find | = 1.1.2 | No fix listed |
| infrae silva find | = 1.1.3 | No fix listed |
References
- holisticinfosec.org patch
- 32585 third-party-advisory vendor-advisory
- www.infrae.com patch
- 49659 vdb-entry
- 32183 vdb-entry
- silva-fulltext-xss(46427) vdb-entry