Vulnerability Details CVE-2008-1283
Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.1%
CVSS Severity
CVSS v2 Score 4.3
References
- http://securityreason.com/securityalert/3725
- http://www.securityfocus.com/archive/1/489282/100/0/threaded
- http://www.securityfocus.com/bid/28148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41089
- http://securityreason.com/securityalert/3725
- http://www.securityfocus.com/archive/1/489282/100/0/threaded
- http://www.securityfocus.com/bid/28148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41089
Products affected by CVE-2008-1283
-
cpe:2.3:a:silver-forge:neptune_web_server:3.0