CVE-2008-2852

Description

Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43176

http://www.securityfocus.com/bid/29811

http://sourceforge.net/project/shownotes.php?group_id=8209&release_id=607349

http://secunia.com/advisories/30765

http://jvn.jp/en/jp/JVN45389864/index.html

http://cgiwrap.sourceforge.net/changes.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3