Unscored severity · published Feb 18, 2009
CVE-2008-6161
Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WR
Wow Raid Manager · Sourceforge
through 3.5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6161
Vendor Advisory
http://secunia.com/advisories/32172
Patch
http://sourceforge.net/project/shownotes.php?release_id=631789
Patch
http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2044.post