{"api_version":"1","generated_at":"2026-07-23T01:31:38+00:00","cve":"CVE-2008-2201","urls":{"html":"https://cve.report/CVE-2008-2201","api":"https://cve.report/api/cve/CVE-2008-2201.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-2201","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-2201"},"summary":{"title":"CVE-2008-2201","description":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-05-14 17:20:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://securityreason.com/securityalert/3881","name":"http://securityreason.com/securityalert/3881","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Maian Recipe v1.2 Xss Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/29032","name":"http://www.securityfocus.com/bid/29032","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Maian Script World Multiple Scripts SQL Injection and Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/30067","name":"http://secunia.com/advisories/30067","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Maian Recipe Cross-Site Scripting Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/491589/100/0/threaded","name":"http://www.securityfocus.com/archive/1/491589/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2201","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2201","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"maianscriptworld","cpe5":"maian_recipe","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:49:58.461Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"29032","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/29032"},{"name":"20080503 Maian Recipe v1.2 Xss Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/491589/100/0/threaded"},{"name":"3881","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3881"},{"name":"maian-recipe-header-xss(42206)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206"},{"name":"30067","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30067"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-05-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"29032","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/29032"},{"name":"20080503 Maian Recipe v1.2 Xss Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/491589/100/0/threaded"},{"name":"3881","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3881"},{"name":"maian-recipe-header-xss(42206)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206"},{"name":"30067","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30067"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-2201","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"29032","refsource":"BID","url":"http://www.securityfocus.com/bid/29032"},{"name":"20080503 Maian Recipe v1.2 Xss Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/491589/100/0/threaded"},{"name":"3881","refsource":"SREASON","url":"http://securityreason.com/securityalert/3881"},{"name":"maian-recipe-header-xss(42206)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206"},{"name":"30067","refsource":"SECUNIA","url":"http://secunia.com/advisories/30067"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-2201","datePublished":"2008-05-14T17:00:00.000Z","dateReserved":"2008-05-14T00:00:00.000Z","dateUpdated":"2024-08-07T08:49:58.461Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-05-14 17:20:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_recipe:1.2:*:*:*:*:*:*:*","matchCriteriaId":"69E7C740-051E-4C93-90C3-E844D2919461"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"2201","Ordinal":"1","Title":"CVE-2008-2201","CVE":"CVE-2008-2201","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"2201","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters.","Type":"Description","Title":"CVE-2008-2201"},{"CveYear":"2008","CveId":"2201","Ordinal":"2","NoteData":"2008-05-14","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"2201","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}