{"api_version":"1","generated_at":"2026-07-23T09:53:40+00:00","cve":"CVE-2008-0093","urls":{"html":"https://cve.report/CVE-2008-0093","api":"https://cve.report/api/cve/CVE-2008-0093.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0093","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0093"},"summary":{"title":"CVE-2008-0093","description":"Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-01-08 01:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html","name":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"The DigiTrust Group: Advisory #071228a - eTicket Persistent Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28331","name":"http://secunia.com/advisories/28331","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"eTicket Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/27130","name":"http://www.securityfocus.com/bid/27130","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"eTicket 'newticket.php' Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0093","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0093","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"93","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eticket","cpe5":"eticket","cpe6":"1.5.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"93","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eticket","cpe5":"eticket","cpe6":"1.5.6_rc2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"93","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eticket","cpe5":"eticket","cpe6":"1.5.6_rc3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:32:23.849Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"27130","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/27130"},{"name":"eticket-name-subject-xss(39400)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html"},{"name":"28331","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28331"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-01-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"27130","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/27130"},{"name":"eticket-name-subject-xss(39400)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400"},{"tags":["x_refsource_MISC"],"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html"},{"name":"28331","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28331"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-0093","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"27130","refsource":"BID","url":"http://www.securityfocus.com/bid/27130"},{"name":"eticket-name-subject-xss(39400)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400"},{"name":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html","refsource":"MISC","url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html"},{"name":"28331","refsource":"SECUNIA","url":"http://secunia.com/advisories/28331"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-0093","datePublished":"2008-01-08T01:00:00.000Z","dateReserved":"2008-01-07T00:00:00.000Z","dateUpdated":"2024-08-07T07:32:23.849Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-01-08 01:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"58F416E7-3F9A-4830-BD13-C6A7D45681BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E0FDA0E7-0503-47D9-BEA6-F124E9B411B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.6_rc3:*:*:*:*:*:*:*","matchCriteriaId":"B54CC1FA-6654-426C-8AE0-CCD973C3F7F3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"93","Ordinal":"1","Title":"CVE-2008-0093","CVE":"CVE-2008-0093","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"93","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters.","Type":"Description","Title":"CVE-2008-0093"},{"CveYear":"2008","CveId":"93","Ordinal":"2","NoteData":"2008-01-07","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"93","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}