CVE-2008-1468

NameCVE-2008-1468
DescriptionCross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs472644

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
namazu2 (PTS)bookworm, bullseye2.0.21-23fixed
sid, trixie2.0.21-25fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
namazu2source(unstable)2.0.18-0.1low472644
Search for package or bug name: Reporting problems