CVE-2008-1502

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.

La función _bad_protocol_once en el archivo phpgwapi/inc/class.kses.inc.php en KSES, como es usado en eGroupWare versiones anteriores a 1.4.003, Moodle versiones anteriores a 1.8.5 y otros productos, permite a los atacantes remotos omitir el filtrado de HTML y conducir ataques de tipo cross-site scripting (XSS) por medio de una cadena que contiene protocolos URL especialmente diseñados.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-03-25 CVE Reserved
2008-03-25 CVE Published
2024-08-07 CVE Updated
2024-08-07 First Exploit
2024-11-12 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (21)

URL	Tag	Source
http://secunia.com/advisories/31167	Third Party Advisory
http://www.egroupware.org/changelog	X_refsource_confirm
http://www.openwall.com/lists/oss-security/2008/07/08/14	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/41435	Vdb Entry

URL	Date	SRC
http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110	2024-08-07

URL	Date	SRC
http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5	2020-12-01
http://www.debian.org/security/2008/dsa-1691	2020-12-01
http://www.securityfocus.com/bid/28424	2020-12-01

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html	2020-12-01
http://secunia.com/advisories/29491	2020-12-01
http://secunia.com/advisories/30073	2020-12-01
http://secunia.com/advisories/30986	2020-12-01
http://secunia.com/advisories/31017	2020-12-01
http://secunia.com/advisories/31018	2020-12-01
http://secunia.com/advisories/32400	2020-12-01
http://secunia.com/advisories/32446	2020-12-01
http://www.debian.org/security/2009/dsa-1871	2020-12-01
http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml	2020-12-01
http://www.vupen.com/english/advisories/2008/0989/references	2020-12-01
https://usn.ubuntu.com/658-1	2020-12-01
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html	2020-12-01

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				<= 1.4.002 Search vendor "Egroupware" for product "Egroupware" and version " <= 1.4.002"		-		Affected
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				1.0 Search vendor "Egroupware" for product "Egroupware" and version "1.0"		-		Affected
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				1.0.1 Search vendor "Egroupware" for product "Egroupware" and version "1.0.1"		-		Affected
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				1.0.3 Search vendor "Egroupware" for product "Egroupware" and version "1.0.3"		-		Affected
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				1.0.6 Search vendor "Egroupware" for product "Egroupware" and version "1.0.6"		-		Affected
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				1.2.106-2 Search vendor "Egroupware" for product "Egroupware" and version "1.2.106-2"		-		Affected
Egroupware Search vendor "Egroupware"		Egroupware Search vendor "Egroupware" for product "Egroupware"				1.4.001 Search vendor "Egroupware" for product "Egroupware" and version "1.4.001"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				<= 1.8.4 Search vendor "Moodle" for product "Moodle" and version " <= 1.8.4"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.1.1 Search vendor "Moodle" for product "Moodle" and version "1.1.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.2.0 Search vendor "Moodle" for product "Moodle" and version "1.2.0"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.2.1 Search vendor "Moodle" for product "Moodle" and version "1.2.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.3.0 Search vendor "Moodle" for product "Moodle" and version "1.3.0"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.3.1 Search vendor "Moodle" for product "Moodle" and version "1.3.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.3.2 Search vendor "Moodle" for product "Moodle" and version "1.3.2"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.3.3 Search vendor "Moodle" for product "Moodle" and version "1.3.3"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.3.4 Search vendor "Moodle" for product "Moodle" and version "1.3.4"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.4.1 Search vendor "Moodle" for product "Moodle" and version "1.4.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.4.2 Search vendor "Moodle" for product "Moodle" and version "1.4.2"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.4.3 Search vendor "Moodle" for product "Moodle" and version "1.4.3"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.4.4 Search vendor "Moodle" for product "Moodle" and version "1.4.4"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.4.5 Search vendor "Moodle" for product "Moodle" and version "1.4.5"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.5 Search vendor "Moodle" for product "Moodle" and version "1.5"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.5.0 Search vendor "Moodle" for product "Moodle" and version "1.5.0"		beta		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.5.1 Search vendor "Moodle" for product "Moodle" and version "1.5.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.5.2 Search vendor "Moodle" for product "Moodle" and version "1.5.2"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.5.3 Search vendor "Moodle" for product "Moodle" and version "1.5.3"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.0 Search vendor "Moodle" for product "Moodle" and version "1.6.0"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.1 Search vendor "Moodle" for product "Moodle" and version "1.6.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.2 Search vendor "Moodle" for product "Moodle" and version "1.6.2"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.3 Search vendor "Moodle" for product "Moodle" and version "1.6.3"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.4 Search vendor "Moodle" for product "Moodle" and version "1.6.4"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.5 Search vendor "Moodle" for product "Moodle" and version "1.6.5"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.6 Search vendor "Moodle" for product "Moodle" and version "1.6.6"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.6.7 Search vendor "Moodle" for product "Moodle" and version "1.6.7"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.7.1 Search vendor "Moodle" for product "Moodle" and version "1.7.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.7.2 Search vendor "Moodle" for product "Moodle" and version "1.7.2"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.7.3 Search vendor "Moodle" for product "Moodle" and version "1.7.3"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.7.4 Search vendor "Moodle" for product "Moodle" and version "1.7.4"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.7.5 Search vendor "Moodle" for product "Moodle" and version "1.7.5"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.7.6 Search vendor "Moodle" for product "Moodle" and version "1.7.6"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.8.1 Search vendor "Moodle" for product "Moodle" and version "1.8.1"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.8.2 Search vendor "Moodle" for product "Moodle" and version "1.8.2"		-		Affected
Moodle Search vendor "Moodle"		Moodle Search vendor "Moodle" for product "Moodle"				1.8.3 Search vendor "Moodle" for product "Moodle" and version "1.8.3"		-		Affected