Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article comments feature and the (2) search log feature.
References
Link | Resource |
---|---|
http://puresw.com/kb/idx.php/8/025/article/Changelog.html | URL Repurposed |
http://secunia.com/advisories/31217 | Vendor Advisory |
http://www.securityfocus.com/bid/30367 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/43985 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2008-07-28 17:41
Updated : 2024-02-14 01:17
NVD link : CVE-2008-3353
Mitre link : CVE-2008-3353
CVE.ORG link : CVE-2008-3353
JSON object : View
Products Affected
puresw
- lore
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')