{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-02-17T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20080217 ATutor <= 1.5.5 Cross Site Scripting", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/488293/100/0/threaded"}, {"name": "29015", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29015"}, {"name": "27855", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27855"}, {"name": "3670", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3670"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-0828", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20080217 ATutor <= 1.5.5 Cross Site Scripting", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/488293/100/0/threaded"}, {"name": "29015", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29015"}, {"name": "27855", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27855"}, {"name": "3670", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3670"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T08:01:39.781Z"}, "title": "CVE Program Container", "references": [{"name": "20080217 ATutor <= 1.5.5 Cross Site Scripting", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/488293/100/0/threaded"}, {"name": "29015", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29015"}, {"name": "27855", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27855"}, {"name": "3670", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3670"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-0828", "datePublished": "2008-02-19T21:00:00", "dateReserved": "2008-02-19T00:00:00", "dateUpdated": "2024-08-07T08:01:39.781Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A91B9E7-35E2-4EEF-9445-6FE85C6F882F", "versionEndIncluding": "1.5.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:0.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "29578CEF-9EC3-4A3D-ADB0-528B7AFA592F", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:0.9.7:*:*:*:*:*:*:*", "matchCriteriaId": "5F2D8D00-F509-49BB-8594-D0FD2C8A5011", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "1D4F1FB2-F35E-444F-8A7F-77C6FDCE9CC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "FED293AE-94FD-444B-85A6-3ABCC7C97654", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "ECE4E6E1-0B9B-4EBE-8727-AD04E1BB5C02", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.3:*:*:*:*:*:*:*", "matchCriteriaId": "827CD64E-2E84-422A-A405-16FCB4E80863", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "CE05B757-B3B2-47DE-AFB6-073D5C639D07", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "3D97A1FF-B3B4-406C-814A-F7504B9EE290", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "1A3D3293-3761-46BE-B581-8B8447FB5059", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.4:*:*:*:*:*:*:*", "matchCriteriaId": "31C48DDB-B334-499A-9C1B-122D6942BD57", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "9E682277-2B37-4C0B-98F5-52A4427B8853", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "341B04AA-926D-400E-9A47-D2F183E26AC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "05E50596-38A3-4C7A-9561-99950DA33A4E", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "7BA98319-09F3-4AE9-AF14-B1BE424AB7DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.1:pl1:*:*:*:*:*:*", "matchCriteriaId": "DD94D6E8-4DA1-48C9-8708-43D1BEDB6CC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.1:pl2:*:*:*:*:*:*", "matchCriteriaId": "0AD5C011-1B1C-4DC2-AA01-81B14EF2B8E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "1C60745C-ECC2-41AD-8795-6D274F269F85", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "2765EAFB-6663-4F16-B285-6DA8D26E6CD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "3849980E-F74A-4C85-B3A1-FECAF888546F", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "D5B36A11-B728-468A-802E-A7C8362D154A", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "189D9776-C554-4084-8C31-21935F83A416", "vulnerable": true}, {"criteria": "cpe:2.3:a:atutor:atutor:1.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "54D08E87-E4BC-449F-93B6-D567926BCE84", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de tipo cross-site scripting (XSS) en ATutor versi\u00f3n 1.5.5 y anteriores, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de (1) atributos como style y onmouseover en (a) forum post o (b) email ; o (2) el campo website del perfil."}], "id": "CVE-2008-0828", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2008-02-19T21:44:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29015"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3670"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/488293/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/27855"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29015"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3670"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/488293/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/27855"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}