CVE-2008-5729

Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) form and (2) control parameters to FCKeditor/neditor.php, and the (3) path parameter to admin/siteinfo/iframe.inc.php.

Link	Resource
http://www.securityfocus.com/bid/32992	Exploit
http://securityreason.com/securityalert/4819
https://exchange.xforce.ibmcloud.com/vulnerabilities/47577
https://www.exploit-db.com/exploits/7560

Configuration 1

cpe:2.3:a:netcat:netcat:2.4:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:2.3:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:2.1:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:2.2:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:*:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:* cpe:2.3:a:netcat:netcat:2.0:*:*:*:*:*:*:*

---

Published : 2008-12-26 05:30

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5729

Mitre link : CVE-2008-5729

No products.

CWE-79