CVE-2008-0642 — Cross-site Scripting in Adobe Robohelp

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
6.1MEDIUMNVD
CNA4.3
EPSS
2.5%
top 14.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Robohelp
Timeline
PublishedFeb 15
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDadobe/robohelp6, 7+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hwc8-3mcr-2wjf: Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) Wil↗2022-05-01
▶
CVEList
CVE-2008-0642: Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) Wil↗2008-02-15
▶

💥Exploits & PoCs

1
Exploit-DB
Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure↗2010-02-11
▶
CVE-2008-0642 — Cross-site Scripting in Adobe Robohelp | cvebase