Unscored severity · published Dec 31, 2008
CVE-2008-5786
Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Silva · Infrae
1.0.2; 1.0.3; 1.1; 1.1.1; 1.1.2; 1.1.4; +34 more · source: NVD
SF
Silva Find · Infrae
through 1.1.5; 0.1; 0.1.1; 0.1.2; 1.0; 1.1; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5786
Patch
http://holisticinfosec.org/content/view/91/45/
Vendor Advisory
http://secunia.com/advisories/32585
Patch
http://www.infrae.com/newsitems/silva_security_bulletin_08-11-07
www.osvdb.org
http://www.osvdb.org/49659
www.securityfocus.com
http://www.securityfocus.com/bid/32183
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/46427