CVE-2008-0828: XSS
Published Feb 19, 2008
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile.
Affected Software
23 affected components
ATutor ATutor=1.3.1
ATutor ATutor=1.5.3-rc2
ATutor ATutor=0.9.7
ATutor ATutor=1.5.1-pl2
ATutor ATutor=1.3
ATutor ATutor<=1.5.5
ATutor ATutor=1.5.2
ATutor ATutor=1.3.2
ATutor ATutor=0.9.6
ATutor ATutor=1.4.3
ATutor ATutor=1.5.3.1
ATutor ATutor=1.0
ATutor ATutor=1.5.1
ATutor ATutor=1.4.2
ATutor ATutor=1.5.3.2
ATutor ATutor=1.5.4
ATutor ATutor=1.5.1-pl1
ATutor ATutor=1.2.1
ATutor ATutor=1.5.3
ATutor ATutor=1.2.2
ATutor ATutor=1.4.1
ATutor ATutor=1.4
ATutor ATutor=1.3.3
Remediation
Patch Available
Event History
Feb 19, 2008
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0828?
CVE-2008-0828 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-0828?
To fix CVE-2008-0828, you should update to the latest version of ATutor that addresses these vulnerabilities.
3
What are the affected versions for CVE-2008-0828?
CVE-2008-0828 affects ATutor versions 1.5.5 and earlier, including 1.0, 1.2.1, 1.3.3, and up to 1.5.5.
4
Can CVE-2008-0828 be exploited remotely?
Yes, CVE-2008-0828 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.
5
What type of vulnerability is CVE-2008-0828?
CVE-2008-0828 is a cross-site scripting (XSS) vulnerability.