Unrated severityNVD Advisory· Published Mar 24, 2008· Updated Apr 23, 2026
CVE-2008-1468
CVE-2008-1468
Description
Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.
Affected products
9cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*range: <=2.0.17
- cpe:2.3:a:namazu:namazu:1.3.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:namazu:namazu:2.0.16:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- secunia.com/advisories/29386nvdVendor Advisory
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- jvn.jp/jp/JVN%2300892830/index.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlnvd
- marc.infonvd
- secunia.com/advisories/29561nvd
- secunia.com/advisories/31687nvd
- secunia.com/advisories/39645nvd
- www.namazu.org/security.html.ennvd
- www.securityfocus.com/bid/28380nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41360nvd
- www.redhat.com/archives/fedora-package-announce/2008-March/msg00575.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2008-March/msg00654.htmlnvd
News mentions
0No linked articles in our index yet.