Unrated severityNVD Advisory· Published Dec 10, 2008· Updated Apr 23, 2026
CVE-2008-5304
CVE-2008-5304
Description
Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable.
Affected products
21cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*range: <=4.2.3
- cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304nvdPatchVendor Advisory
- www.securityfocus.com/bid/32669nvdExploit
- secunia.com/advisories/33040nvdVendor Advisory
- securitytracker.com/idnvd
- www.vupen.com/english/advisories/2008/3381nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/47122nvd
News mentions
0No linked articles in our index yet.