CVE-2008-1002

Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.

• CWE-79

• http://docs.info.apple.com/article.html?artnum=307563
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.htmlPatch
• http://secunia.com/advisories/29393
• http://www.kb.cert.org/vuls/id/766019US Government Resource
• http://www.securityfocus.com/bid/28290
• http://www.securityfocus.com/bid/28328
• http://www.securitytracker.com/id?1019653
• http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0920/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41335
• http://docs.info.apple.com/article.html?artnum=307563
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.htmlPatch
• http://secunia.com/advisories/29393
• http://www.kb.cert.org/vuls/id/766019US Government Resource
• http://www.securityfocus.com/bid/28290
• http://www.securityfocus.com/bid/28328
• http://www.securitytracker.com/id?1019653
• http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0920/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41335

Published

Mar 19, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1000Directory traversal vulnerability in ContentServer.py in the…
• CVE-2008-10001A vulnerability, which was classified as problematic, has be…6.1
• CVE-2008-10002A vulnerability has been found in cfire24 ajaxlife up to 0.3…6.1
• CVE-2008-10003A vulnerability was found in iGamingModules flashgames 1.1.0…9.8
• CVE-2008-10004A vulnerability was found in Email Registration 5.x-2.1 on D…9.8
• CVE-2008-1001Cross-site scripting (XSS) vulnerability in Apple Safari bef…
• CVE-2008-1003Cross-site scripting (XSS) vulnerability in WebCore, as used…
• CVE-2008-1004Cross-site scripting (XSS) vulnerability in WebCore, as used…
• CVE-2008-1005WebCore, as used in Apple Safari before 3.1, does not proper…
• CVE-2008-1006Cross-site scripting (XSS) vulnerability in WebCore, as used…
• CVE-2008-1007WebCore, as used in Apple Safari before 3.1, does not enforc…
• CVE-2008-1008Cross-site scripting (XSS) vulnerability in WebCore, as used…