CVE-2008-1476: XSS
Published Mar 24, 2008
·Updated
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
Affected Software
26 affected components
serendipity Serendipity=0.8
serendipity Serendipity=0.9.1
serendipity Serendipity=1.1.2
serendipity Serendipity=1.0.1
serendipity Serendipity=0.3
serendipity Serendipity=0.8.3
serendipity Serendipity<=1.2.1
serendipity Serendipity=1.1
serendipity Serendipity=1.0.4
serendipity Serendipity=1.1.3
serendipity Serendipity=0.8.2
serendipity Serendipity=0.8.4
serendipity Serendipity=0.9
serendipity Serendipity=0.8.1
serendipity Serendipity=0.7.1
serendipity Serendipity=1.1.4
serendipity Serendipity=0.6_pl3
serendipity Serendipity=1.2
serendipity Serendipity=1.0.2
serendipity Serendipity=0.5_pl1
serendipity Serendipity=0.8.5
serendipity Serendipity=1.1.1
serendipity Serendipity=0.4
serendipity Serendipity=0.7
serendipity Serendipity=1.0
serendipity Serendipity=1.0.3
Event History
Mar 24, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1476?
CVE-2008-1476 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-1476?
To fix CVE-2008-1476, update your Serendipity installation to version 1.3 or later.
3
What software is affected by CVE-2008-1476?
CVE-2008-1476 affects Serendipity versions up to and including 1.2.1 and several specific earlier versions.
4
What type of vulnerability is CVE-2008-1476?
CVE-2008-1476 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2008-1476 be exploited remotely?
Yes, CVE-2008-1476 can be exploited remotely, allowing attackers to inject arbitrary web scripts or HTML.