CVE-2008-7220
NoneCVSS
—
EPSS
13.4%
Published
Sep 13, 2009
CISA due date
—
The record
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | asterisk | 0 | 1:1.6.2.0~rc3-1 |
| Debian:10 | jscropperui | 0 | 1.2.1-1 |
| Debian:10 | libaws | 0 | 2.7-1 |
| Debian:10 | libhtml-prototype-perl | 0 | 1.48-3 |
| Debian:10 | otrs2 | 0 | 2.3.4-6 |
| Debian:10 | scriptaculous | 0 | 1.8.3-1 |
| Debian:10 | symfony | 0 | 1.0.21-1.1 |
| Debian:10 | webhelpers | 0 | 0.3.4-2 |
| Debian:10 | wordpress | 0 | 2.5.0-2 |
| Debian:11 | asterisk | 0 | 1:1.6.2.0~rc3-1 |
| Debian:11 | jscropperui | 0 | 1.2.1-1 |
| Debian:11 | libaws | 0 | 2.7-1 |
| Debian:11 | libhtml-prototype-perl | 0 | 1.48-3 |
| Debian:11 | otrs2 | 0 | 2.3.4-6 |
| Debian:11 | prototypejs | 0 | 1.6.0.2-1 |
| Debian:11 | scriptaculous | 0 | 1.8.3-1 |
| Debian:11 | symfony | 0 | 1.0.21-1.1 |
| Debian:11 | wordpress | 0 | 2.5.0-2 |
| Debian:12 | jscropperui | 0 | 1.2.1-1 |
| Debian:12 | libhtml-prototype-perl | 0 | 1.48-3 |
| Debian:12 | prototypejs | 0 | 1.6.0.2-1 |
| Debian:12 | scriptaculous | 0 | 1.8.3-1 |
| Debian:12 | symfony | 0 | 1.0.21-1.1 |
| Debian:12 | wordpress | 0 | 2.5.0-2 |
| Debian:13 | exaile | 0 | 0.2.14+debian-2.2 |
| Debian:13 | jscropperui | 0 | 1.2.1-1 |
| Debian:13 | libhtml-prototype-perl | 0 | 1.48-3 |
| Debian:13 | prototypejs | 0 | 1.6.0.2-1 |
| Debian:13 | scriptaculous | 0 | 1.8.3-1 |
| Debian:13 | symfony | 0 | 1.0.21-1.1 |
| Debian:13 | wordpress | 0 | 2.5.0-2 |
| Debian:14 | exaile | 0 | 0.2.14+debian-2.2 |
| Debian:14 | jscropperui | 0 | 1.2.1-1 |
| Debian:14 | libhtml-prototype-perl | 0 | 1.48-3 |
| Debian:14 | prototypejs | 0 | 1.6.0.2-1 |
| Debian:14 | scriptaculous | 0 | 1.8.3-1 |
| Debian:14 | symfony | 0 | 1.0.21-1.1 |
| Debian:14 | wordpress | 0 | 2.5.0-2 |
| Debian:5.0 | asterisk | 0 | 1:1.4.21.2~dfsg-3+lenny1 |
Related vulnerabilities
- CVE-2022-39269 PJSIP is a free and open source multimedia communication library written in C. Also affects asterisk
- CVE-2022-24763 PJSIP is a free and open source multimedia communication library written in the C… Also affects asterisk
- CVE-2008-1289 Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3… Also affects asterisk
- CVE-2008-0095 The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition… Also affects asterisk
- CVE-2007-2293 Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the… Also affects asterisk
- CVE-2007-1561 The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote… Also affects asterisk
- CVE-2007-1306 Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial… Also affects asterisk
- CVE-2006-5444 Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c)… Also affects asterisk