CVE-2008-0917
Summary
| CVE | CVE-2008-0917 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-02-22 23:44:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi (aka Quotes of the Day) 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier, Simple Vote 1.1 and earlier, and Com Vote 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tor World | Com Vote | 1.2 | All | All | All |
| Application | Tor World | I-navigator | 4.0 | All | All | All |
| Application | Tor World | Interactive Bbs | 1.3 | All | All | All |
| Application | Tor World | Mobile Frontier | 2.1 | All | All | All |
| Application | Tor World | Quotes Of The Day | 1.5 | All | All | All |
| Application | Tor World | Simple Bbs | 1.3 | All | All | All |
| Application | Tor World | Simple Vote | 1.1 | All | All | All |
| Application | Tor World | Tor Board | 1.1 | All | All | All |
| Application | Tor World | Tor News | 1.21 | All | All | All |
| Application | Tor World | Tor Search | 1.1 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVN#54593414: 複数の Tor World 製 CGI スクリプトにおけるクロスサイトスクリプティングの脆弱性 | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | |
| Security Advisory SA29039 - Tor World CGI Scripts Multiple Unspecified Cross-Site Scripting Vulnerabilities - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| download.torworld.com/bug/20080221.html | af854a3a-2127-422b-91ae-364da2661108 | download.torworld.com | |
| Tor World CGI Scripts Unspecified Cross-Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| JVN:JVN#54593414 | MITRE | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.