Unscored severity · published Jun 25, 2008
CVE-2008-2848
Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Dekiwiki · Mindtouch
through 8.05 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2848
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2848
bugs.developer.mindtouch.com
http://bugs.developer.mindtouch.com/view.php?id=4200
Vendor Advisory
http://secunia.com/advisories/30758
www.securityfocus.com
http://www.securityfocus.com/bid/29830
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43189
More from Dekiwiki
–
CVE-2007-1418
Cross-site scripting (XSS) vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Gooseberry++ allows remote attackers to inject arbitrary web script…