{"api_version":"1","generated_at":"2026-07-23T12:00:53+00:00","cve":"CVE-2008-4076","urls":{"html":"https://cve.report/CVE-2008-4076","api":"https://cve.report/api/cve/CVE-2008-4076.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-4076","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-4076"},"summary":{"title":"CVE-2008-4076","description":"Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-09-15 15:14:07","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://download.torworld.com/bug/20080905.html","name":"http://download.torworld.com/bug/20080905.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31105","name":"http://www.securityfocus.com/bid/31105","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Multiple Tor World CGI Scripts Remote Script Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/31835","name":"http://secunia.com/advisories/31835","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Tor World CGI Scripts Cross-Site Scripting Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN18616622/index.html","name":"http://jvn.jp/en/jp/JVN18616622/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4076","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4076","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"4076","vulnerable":"1","versionEndIncluding":"1.57","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tor_world","cpe5":"interactive_bbs","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4076","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tor_world","cpe5":"simple_bbs","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4076","vulnerable":"1","versionEndIncluding":"1.86","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tor_world","cpe5":"simple_bbs","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4076","vulnerable":"1","versionEndIncluding":"1.11","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tor_world","cpe5":"topics_bbs","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4076","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tor_world","cpe5":"tor_board","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4076","vulnerable":"1","versionEndIncluding":"1.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tor_world","cpe5":"tor_board","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:00:42.664Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"31835","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31835"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://download.torworld.com/bug/20080905.html"},{"name":"tor-world-multiple-unspecified-xss(45043)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043"},{"name":"31105","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31105"},{"name":"JVN#18616622","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN18616622/index.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-09-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"31835","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31835"},{"tags":["x_refsource_CONFIRM"],"url":"http://download.torworld.com/bug/20080905.html"},{"name":"tor-world-multiple-unspecified-xss(45043)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043"},{"name":"31105","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31105"},{"name":"JVN#18616622","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN18616622/index.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-4076","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"31835","refsource":"SECUNIA","url":"http://secunia.com/advisories/31835"},{"name":"http://download.torworld.com/bug/20080905.html","refsource":"CONFIRM","url":"http://download.torworld.com/bug/20080905.html"},{"name":"tor-world-multiple-unspecified-xss(45043)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043"},{"name":"31105","refsource":"BID","url":"http://www.securityfocus.com/bid/31105"},{"name":"JVN#18616622","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN18616622/index.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-4076","datePublished":"2008-09-15T15:00:00.000Z","dateReserved":"2008-09-15T00:00:00.000Z","dateUpdated":"2024-08-07T10:00:42.664Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-09-15 15:14:07","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:interactive_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.57","matchCriteriaId":"44638D98-6133-46A5-AAFB-CFFEE1BAD983"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:simple_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.86","matchCriteriaId":"F6522E41-84B0-4A1C-835A-4C423B2FE125"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:simple_bbs:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C65B72C5-9C2A-49B4-9292-09B58DD7496E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:topics_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11","matchCriteriaId":"D115C37C-C9C2-4058-97E5-840A6FC3C4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_board:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"59266471-5B2C-4356-9C40-2FD390B6B769"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_board:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3D7C4FD4-9402-479C-9986-6C34362F056F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"4076","Ordinal":"1","Title":"CVE-2008-4076","CVE":"CVE-2008-4076","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"4076","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917.","Type":"Description","Title":"CVE-2008-4076"},{"CveYear":"2008","CveId":"4076","Ordinal":"2","NoteData":"2008-09-15","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"4076","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}