CVE-2008-2567: XSS

Q: What access does an attacker need to exploit this issue?

The vulnerability is remotely exploitable and requires no authentication. Exploitation has medium attack complexity.

Q: What is the potential impact of successful exploitation?

An attacker can inject arbitrary web script or HTML. The listed impact affects integrity, while confidentiality and availability impacts are not indicated.

Published Jun 6, 2008

Updated

Cross-site scripting (XSS) vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search, a different vulnerability than CVE-2007-6002.

Affected Software

1 affected component

Fenrir Grani<=3.1

Remediation

Patch Available

http://www.securityfocus.com/bid/29555

Event History

Jun 6, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

Which products and versions are affected?

Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier are affected.

What access does an attacker need to exploit this issue?

The vulnerability is remotely exploitable and requires no authentication. Exploitation has medium attack complexity.

What is the potential impact of successful exploitation?

An attacker can inject arbitrary web script or HTML. The listed impact affects integrity, while confidentiality and availability impacts are not indicated.

Is a fix available?

Yes. A patch is available.