CVE-2008-0917
Medium
Description
Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi (aka Quotes of the Day) 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier, Simple Vote 1.1 and earlier, and Com Vote 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
SeverityMedium
CVSS4.3
Exploit probability—
ProductTor World I-navigator
PublishedFeb 22, 2008
First seenFeb 22, 2008
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tor_world i-navigator | 4.0 | — |
| tor_world com_vote | 1.2 | — |
| tor_world interactive_bbs | 1.3 | — |
| tor_world mobile_frontier | 2.1 | — |
| tor_world quotes_of_the_day | 1.5 | — |
| tor_world simple_bbs | 1.3 | — |
| tor_world simple_vote | 1.1 | — |
| tor_world tor_board | 1.1 | — |
| tor_world tor_news | 1.21 | — |
| tor_world tor_search | 1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.