← Database

CVE-2008-5786

MEDIUM CVSS: 4.3 Published: 2008-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter.

Affected Platforms

Infrae Silva FindInfrae Silva

Weakness Type

CWE-79

References