CVE-2008-3334 (GCVE-0-2008-3334)
Vulnerability from cvelistv5
Published
2008-07-27 23:00
Modified
2024-08-07 09:37
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:37:27.076Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "31216",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31216"
},
{
"name": "30401",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30401"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://community.mybboard.net/thread-33865.html"
},
{
"name": "mybb-unspecified-xss(44034)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44034"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-07-21T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-07T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "31216",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31216"
},
{
"name": "30401",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30401"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://community.mybboard.net/thread-33865.html"
},
{
"name": "mybb-unspecified-xss(44034)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44034"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-3334",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "31216",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31216"
},
{
"name": "30401",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30401"
},
{
"name": "http://community.mybboard.net/thread-33865.html",
"refsource": "CONFIRM",
"url": "http://community.mybboard.net/thread-33865.html"
},
{
"name": "mybb-unspecified-xss(44034)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44034"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-3334",
"datePublished": "2008-07-27T23:00:00",
"dateReserved": "2008-07-27T00:00:00",
"dateUpdated": "2024-08-07T09:37:27.076Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2008-3334\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2008-07-27T23:41:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de tipo cross-site scripting (XSS) en MyBB versiones 1.2.x anteriores a 1.2.14, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados, posiblemente involucrando el archivo search.php.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.2.13\",\"matchCriteriaId\":\"E3067FB9-BCAA-4B7D-A3FE-8164C32C7440\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD61D970-9363-4A75-A8DB-D0EBA2CF0D53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"990E206E-5E2C-4A68-9FDF-CD47F7524054\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF143B59-5C78-4BF6-9368-5BCF427B4753\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B16F6F07-F5A9-47BF-88ED-25F068B68CF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8A46A48-1361-4DD3-B97D-4C4FC776D68A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"337D89AE-1B7A-4101-B1F7-DFEDF2369385\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE08AF25-EDB1-4DA1-B431-F0692858AAAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF24E7BA-3144-4DBA-9613-A44FBE0822F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"029430A5-85BD-4258-B58D-F3DCBC625E5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4183DB7F-FAB3-4D90-AD87-31CA4150CFDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E2B90B8-DC02-4C79-BD69-DEF79945C418\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5C52215-D236-4D1A-9E30-14B9676FB68A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B48D2EDF-86C2-475C-9476-E5A2D586CA0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6725373-C229-4B57-BB1E-AF178E19DEB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36E4C84A-21D5-4C9A-85F8-45C9657CE6F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7E55085-E3E3-4BB8-A680-19A28D7E88F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB01A9AA-AE70-46DF-815A-05D1101EE706\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98AFD77B-A046-4AB9-B6F4-FFFF66C63C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA00D38E-AAF6-4F66-9203-5C074FC61F30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"137A8CED-BE82-462F-B83C-15F535961E74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D179FDB6-9B1D-438C-B512-9A5C4F869A4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A2D344F-4671-4194-A553-A5773B5DF3B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"245760C8-DC10-47F1-843A-461AE2F3DF61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A055E6BF-3CAC-4C74-8E37-A89E3E0F8559\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6ABDEE8-D463-47CA-998D-33472F3382F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE44965F-F968-4CD2-9F21-1E1A92F5F7F2\"}]}]}],\"references\":[{\"url\":\"http://community.mybboard.net/thread-33865.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://secunia.com/advisories/31216\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/30401\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44034\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://community.mybboard.net/thread-33865.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://secunia.com/advisories/31216\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/30401\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44034\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…