Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-4761

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2008-4761
Last Modified 30 Oct 2008 12:00:00
Published 27 Oct 2008 10:00:04
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2008-4761

Summary

Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue is probably in the HTMLArea HTMLTidy (HTML Tidy) plugin, not eSupport.

Vulnerable Systems

Application

  • Kayako Esupport 3.20.2


References

XF - esupport-htmltidylogic-xss(46097)

BID - 31908

MLIST - [oss-security] 20081027 XSS in HTML Tidy plugin used in WYSIWYG HTML editors

MISC - http://downloads.securityfocus.com/vulnerabilities/exploits/31908.html


Last Updated: 27 May 2016 10:48:36