CVE-2008-3255

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-07-22 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Ln-Lab Webproxy: 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5 (+3)

References

http://jvn.jp/en/jp/JVN49704543/index.html
http://secunia.com/advisories/31042
http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni
http://www.securityfocus.com/bid/30283
https://exchange.xforce.ibmcloud.com/vulnerabilities/43879
http://jvn.jp/en/jp/JVN49704543/index.html
http://secunia.com/advisories/31042
http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni
http://www.securityfocus.com/bid/30283
https://exchange.xforce.ibmcloud.com/vulnerabilities/43879

Get alerted when CVE-2008-3255 or the next vulnerability affects your stack