medium4.3
CVE-2008-2777
Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Impact
Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Luca Corbo | Ortro | Versions 0.9.0, 0.9.1, 0.9.2, 1.0.0, 1.0.1, 1.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30398
- http://www.ortro.net/changelog#release_1.3.1_2008.05.27
- http://www.vupen.com/english/advisories/2008/1679/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42657
- http://secunia.com/advisories/30398
- http://www.ortro.net/changelog#release_1.3.1_2008.05.27
- http://www.vupen.com/english/advisories/2008/1679/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42657