medium4.3
CVE-2008-6428
The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Impact
The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kayalang | Kaya | Version 0.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://kayalang.org/about/news
- http://osvdb.org/45882
- http://secunia.com/advisories/30466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42774
- http://kayalang.org/about/news
- http://osvdb.org/45882
- http://secunia.com/advisories/30466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42774