CVE-2008-0919: XSS

Published Feb 22, 2008

Updated

Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter.

Affected Software

25 affected components

Open Source Security Information Management Os-sim=0.1alpha

Open Source Security Information Management Os-sim=0.2alpha

Open Source Security Information Management Os-sim=0.3.1alpha

Open Source Security Information Management Os-sim=0.3alpha

Open Source Security Information Management Os-sim=0.5.1

Open Source Security Information Management Os-sim=0.5.2

Open Source Security Information Management Os-sim=0.6

Open Source Security Information Management Os-sim=0.6.2

Open Source Security Information Management Os-sim=0.6.3

Open Source Security Information Management Os-sim=0.7

Open Source Security Information Management Os-sim=0.7.1

Open Source Security Information Management Os-sim=0.8

Open Source Security Information Management Os-sim=0.9

Open Source Security Information Management Os-sim=0.9.1

Open Source Security Information Management Os-sim=0.9.2

Open Source Security Information Management Os-sim=0.9.3

Open Source Security Information Management Os-sim=0.9.4

Open Source Security Information Management Os-sim=0.9.5

Open Source Security Information Management Os-sim=0.9.6

Open Source Security Information Management Os-sim=0.9.7

Open Source Security Information Management Os-sim=0.9.8

Open Source Security Information Management Os-sim=0.9.9_rc1

Open Source Security Information Management Os-sim=0.9.9_rc2

Open Source Security Information Management Os-sim=0.9.9_rc3

Open Source Security Information Management Os-sim=0.9.9_rc4

Remediation

Patch Available

http://www.securityfocus.com/bid/27929

Event History

Feb 22, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0919?

CVE-2008-0919 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2008-0919?

To fix CVE-2008-0919, upgrade to a patched version of Open Source Security Information Management that addresses the cross-site scripting vulnerability.

What type of vulnerability is CVE-2008-0919?

CVE-2008-0919 is a cross-site scripting (XSS) vulnerability affecting session/login.php in specific versions of OSSIM.

Which versions of OSSIM are affected by CVE-2008-0919?

CVE-2008-0919 affects OSSIM versions 0.9.9 rc5 and earlier.

Can anyone exploit CVE-2008-0919?

Yes, CVE-2008-0919 can be exploited by remote attackers to inject arbitrary web scripts or HTML.