CVE-2008-4076

no score yetEPSS 1.1%

Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2008-09-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

tor_world:interactive_bbs
tor_world:simple_bbs
tor_world:topics_bbs
tor_world:tor_board

References

http://download.torworld.com/bug/20080905.html
http://jvn.jp/en/jp/JVN18616622/index.html
http://secunia.com/advisories/31835
http://www.securityfocus.com/bid/31105
https://exchange.xforce.ibmcloud.com/vulnerabilities/45043

Check your stack JSON