← Database

CVE-2008-1025

MEDIUM CVSS: 4.3 Published: 2008-04-17 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.

Affected Platforms

Apple SafariApple Webkit

Weakness Type

CWE-79

References