CVE-2008-2991

Summary

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/30137
• http://www.vupen.com/english/advisories/2008/2026/references
• http://secunia.com/advisories/31001
• http://securitytracker.com/id?1020442
• http://www.adobe.com/support/security/bulletins/apsb08-16.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• http://www.securityfocus.com/bid/30137
• http://www.vupen.com/english/advisories/2008/2026/references
• http://secunia.com/advisories/31001
• http://securitytracker.com/id?1020442
• http://www.adobe.com/support/security/bulletins/apsb08-16.html

• ←Previous
• Next→