Vulnerability Database

290,273

Total vulnerabilities in the database

CVE-2008-2808

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

  • Published: Jul 8, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-2808
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mozilla / firefox 2.0 2.0.x
mozilla / firefox 2.0-rc2 2.0-rc2.x
mozilla / firefox 2.0-beta_1 2.0-beta_1.x
mozilla / firefox 2.0-rc3 2.0-rc3.x
mozilla / firefox 2.0.0.2 2.0.0.2.x
mozilla / firefox 2.0.0.3 2.0.0.3.x
mozilla / firefox 2.0.0.11 2.0.0.11.x
mozilla / firefox 2.0.0.12 2.0.0.12.x
mozilla / firefox 2.0.0.13 2.0.0.13.x
mozilla / firefox 2.0.0.14 2.0.0.14.x
mozilla / firefox 2.0_.1 2.0_.1.x
mozilla / firefox 2.0_.4 2.0_.4.x
mozilla / firefox 2.0_.5 2.0_.5.x
mozilla / firefox 2.0_.6 2.0_.6.x
mozilla / firefox 2.0_.9 2.0_.9.x
mozilla / firefox 2.0_.10 2.0_.10.x
mozilla / firefox 2.0_8 2.0_8.x
mozilla / seamonkey 1.1-beta 1.1-beta.x
mozilla / seamonkey 1.1.1 1.1.1.x
mozilla / seamonkey 1.1.2 1.1.2.x
mozilla / seamonkey 1.1.3 1.1.3.x
mozilla / seamonkey 1.1.4 1.1.4.x
mozilla / seamonkey 1.1.5 1.1.5.x
mozilla / seamonkey 1.1.6 1.1.6.x
mozilla / seamonkey 1.1.7 1.1.7.x
mozilla / seamonkey 1.1.8 1.1.8.x
mozilla / seamonkey 1.1.9 1.1.9.x
mozilla / thunderbird 2.0_.4 2.0_.4.x
mozilla / thunderbird 2.0_.5 2.0_.5.x
mozilla / thunderbird 2.0_.6 2.0_.6.x
mozilla / thunderbird 2.0_.9 2.0_.9.x
mozilla / thunderbird 2.0_.12 2.0_.12.x
mozilla / thunderbird 2.0_.13 2.0_.13.x
mozilla / thunderbird 2.0_.14 2.0_.14.x
mozilla / thunderbird 2.0_8 2.0_8.x