CVE-2008-0980
published 2008-02-25CVE-2008-0980: Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.48%
70.7th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| spyce | spyce | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Spyce 2.1.3 - '/spyce/examples/formtag.spy' Multiple Cross-Site Scripting Vulnerabilities
exploitdb·2007-02-19
CVE-2008-0980 Spyce 2.1.3 - '/spyce/examples/formtag.spy' Multiple Cross-Site Scripting Vulnerabilities
Spyce 2.1.3 - '/spyce/examples/formtag.spy' Multiple Cross-Site Scripting Vulnerabilities
---
source: https://www.securityfocus.com/bid/27898/info
Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can also obtain a server's webroot path.
The issues affect Spyce 2.1.3; other versions may also be vulnerable.
http://www.example.com/spyce/examples/formtag.spy?="/>alert('Can%20Cross%20Site%20Attack')&foo=Submit!&mycheck=check1&mypass=secret&myrad
Exploit-DB
Spyce 2.1.3 - 'docs/examples/handlervalidate.spy?x' Cross-Site Scripting
exploitdb·2007-02-19
CVE-2008-0980 Spyce 2.1.3 - 'docs/examples/handlervalidate.spy?x' Cross-Site Scripting
Spyce 2.1.3 - 'docs/examples/handlervalidate.spy?x' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/27898/info
Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can also obtain a server's webroot path.
The issues affect Spyce 2.1.3; other versions may also be vulnerable.
http://www.example.com/docs/examples/handlervalidate.spy?x=">alert('Can%20Cross%20Site%20Attack')
Exploit-DB
Spyce 2.1.3 - '/docs/examples/redirect.spy' Multiple Cross-Site Scripting Vulnerabilities
exploitdb·2007-02-19
CVE-2008-0980 Spyce 2.1.3 - '/docs/examples/redirect.spy' Multiple Cross-Site Scripting Vulnerabilities
Spyce 2.1.3 - '/docs/examples/redirect.spy' Multiple Cross-Site Scripting Vulnerabilities
---
source: https://www.securityfocus.com/bid/27898/info
Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can also obtain a server's webroot path.
The issues affect Spyce 2.1.3; other versions may also be vulnerable.
http://www.example.com/docs/examples/redirect.spy?url=%3CSCRIPT%3Ealert('Can%20Cross%20Site%20Attack')%3C/SCRIPT%3E&type=internal
Exploit-DB
Spyce 2.1.3 - 'spyce/examples/getpost.spy?Name' Cross-Site Scripting
exploitdb·2007-02-19
CVE-2008-0980 Spyce 2.1.3 - 'spyce/examples/getpost.spy?Name' Cross-Site Scripting
Spyce 2.1.3 - 'spyce/examples/getpost.spy?Name' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/27898/info
Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can also obtain a server's webroot path.
The issues affect Spyce 2.1.3; other versions may also be vulnerable.
http://www.example.com/spyce/examples/getpost.spy?Name="/>alert('Can%20Cross%20Site%20Attack')
Exploit-DB
Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting
exploitdb·2007-02-19
CVE-2008-0980 Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting
Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/27898/info
Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can also obtain a server's webroot path.
The issues affect Spyce 2.1.3; other versions may also be vulnerable.
http://www.example.com/spyce/examples/request.spy?name="/>alert('Can%20Cross%20Site%20Attack')
Bugzilla
CVE-2008-4822 Flash Player policy file interpretation flaw
bugzilla·2008-11-05·CVSS 6.8
CVE-2008-4822 [MEDIUM] CVE-2008-4822 Flash Player policy file interpretation flaw
CVE-2008-4822 Flash Player policy file interpretation flaw
A flaw was found in the way Flash Player interprets policy files. It is
possible to bypass a non-root domain policy, possibly allowing a malicious
site to access data in a different domain.
Discussion:
Public now via upstream security bulletin:
http://www.adobe.com/support/security/bulletins/apsb08-20.html
Fixed in: 9.0.151.0 and 10.0.12.36
---
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
Bugzilla
CVE-2008-4819 Flash Player DNS rebind attack
bugzilla·2008-11-05·CVSS 6.8
CVE-2008-4819 [MEDIUM] CVE-2008-4819 Flash Player DNS rebind attack
CVE-2008-4819 Flash Player DNS rebind attack
The Flash Player 9.0.151.0 and 10.0.12.36 update "introduces a change to
mitigate a potential issue that could aid an attacker in executing a DNS
rebinding attack."
Discussion:
Public now via upstream security bulletin:
http://www.adobe.com/support/security/bulletins/apsb08-20.html
Fixed in: 9.0.151.0 and 10.0.12.36
---
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
Bugzilla
CVE-2008-4818 Flash Player XSS
bugzilla·2008-11-05·CVSS 4.3
CVE-2008-4818 [MEDIUM] CVE-2008-4818 Flash Player XSS
CVE-2008-4818 Flash Player XSS
Flash Player contains a flaw in the way it interprets HTTP response
headers. An attacker could use this flaw to conduct a cross-site-scripting
attack against the user running Flash Player.
Discussion:
Public now via upstream security bulletin:
http://www.adobe.com/support/security/bulletins/apsb08-20.html
Fixed in: 9.0.151.0 and 10.0.12.36
---
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
Bugzilla
CVE-2008-4823 Flash Player HTML injection flaw
bugzilla·2008-11-05·CVSS 4.3
CVE-2008-4823 [MEDIUM] CVE-2008-4823 Flash Player HTML injection flaw
CVE-2008-4823 Flash Player HTML injection flaw
A flaw was found in the way Flash Player handles the ActionScript
attribute. A malicious site could use this flaw to inject arbitrary HTML
content confusing the user running the browser.
Discussion:
Public now via upstream security bulletin:
http://www.adobe.com/support/security/bulletins/apsb08-20.html
Fixed in: 9.0.151.0 and 10.0.12.36
---
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
Bugzilla
CVE-2008-4821 Flash Player jar: protocol handler
bugzilla·2008-11-05·CVSS 4.3
CVE-2008-4821 [MEDIUM] CVE-2008-4821 Flash Player jar: protocol handler
CVE-2008-4821 Flash Player jar: protocol handler
A flaw was found in how Flash Player's jar: protocol handler interacts with
Mozilla. This flaw could result in sensitive informatoin being disclosed.
Discussion:
Public now via upstream security bulletin:
http://www.adobe.com/support/security/bulletins/apsb08-20.html
Fixed in: 9.0.151.0 and 10.0.12.36
---
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
Bugzilla
CVE-2008-4401 flash-plugin: upload/download user interaction
bugzilla·2008-10-08·CVSS 10.0
CVE-2008-4401 [CRITICAL] CVE-2008-4401 flash-plugin: upload/download user interaction
CVE-2008-4401 flash-plugin: upload/download user interaction
Previosuly ActionScript could initiate uploads and downloads without user
interaction. Flash Player 10 beta changes this behavior.
FileReference.browse and FileReference.download calls now can only be
initiated via user interaction, such as click the mouse or pressing keys on
the keyboard.
For more information please see:
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html#head3
Discussion:
Public now via:
http://www.adobe.com/support/security/bulletins/apsb08-18.html
---
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
Bugzilla
CVE-2008-3873 flash: clipboard hijack attack
bugzilla·2008-10-06·CVSS 4.3
CVE-2008-3873 [MEDIUM] CVE-2008-3873 flash: clipboard hijack attack
CVE-2008-3873 flash: clipboard hijack attack
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-3873 to the following vulnerability:
The System.setClipboard method in Adobe Flash Player allows remote attackers to
populate the clipboard with a URL that is difficult to delete, as exploited in
the wild in August 2008.
References:
http://blogs.zdnet.com/security/?p=1733
http://blogs.zdnet.com/security/?p=1759
http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html
http://www.securityfocus.com/bid/31117
http://securitytracker.com/id?1020724
Demo:
http://raffon.net/research/flash/cb/test.html
Discussion:
This issue was addressed in:
Red Hat Enterprise Linux Extras:
http://rhn.redhat.com/errata/RHSA-2008-0945.html
http://rhn.redhat.com/errata/RHSA-2008-0980.html
http://securityreason.com/securityalert/3699http://www.procheckup.com/Vulnerability_PR08-01.phphttp://www.securityfocus.com/archive/1/488336/100/0/threadedhttp://www.securityfocus.com/bid/27898http://securityreason.com/securityalert/3699http://www.procheckup.com/Vulnerability_PR08-01.phphttp://www.securityfocus.com/archive/1/488336/100/0/threadedhttp://www.securityfocus.com/bid/27898
2008-02-25
Published