CVE Vulnerability

CVE-2008-2567

Cross-site scripting (XSS) vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search, a different vulnerability than CVE-2007-6002.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://jvn.jp/jp/JVN25448394/index.html
http://www.fenrir.co.jp/sleipnir/note.html
http://www.securityfocus.com/bid/29555 Patch
http://secunia.com/advisories/30487 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42827
Configurations

Configuration 1

cpe:2.3:a:fenrir:grani:*:*:*:*:*:*:*:*
Information

Published : 2008-06-06 06:32

Updated : 2017-08-08 01:31

NVD link : CVE-2008-2567

Mitre link : CVE-2008-2567

Products Affected
No products.
CWE
CWE-79