VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 17, 2008· Updated Jun 16, 2026

CVE-2008-1873

CVE-2008-1873

Description

Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authenticated users to inject arbitrary web script or HTML via a CSS property in the STYLE attribute of a DIV element in the mensaje parameter. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Tru Zone/Nukeet2 versions
    cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tru-zone:nukeet:3.4:*:*:*:*:*:*:*
  • Nuke ET/Nuke ETllm-fuzzy
    Range: 3.2, 3.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.