CVE-2008-3821

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

• CWE-79

• http://jvn.jp/en/jp/JVN28344798/index.htmlThird Party Advisory, VDB Entry
• http://osvdb.org/51393Broken Link
• http://osvdb.org/51394Broken Link
• http://secunia.com/advisories/33461Third Party Advisory
• http://securityreason.com/securityalert/4916Third Party Advisory
• http://securitytracker.com/id?1021598Third Party Advisory, VDB Entry
• http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.htmlVendor Advisory
• http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-19Exploit
• http://www.securityfocus.com/archive/1/500063/100/0/threaded
• http://www.securityfocus.com/bid/33260Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/0138Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47947Third Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN28344798/index.htmlThird Party Advisory, VDB Entry
• http://osvdb.org/51393Broken Link
• http://osvdb.org/51394Broken Link
• http://secunia.com/advisories/33461Third Party Advisory
• http://securityreason.com/securityalert/4916Third Party Advisory
• http://securitytracker.com/id?1021598Third Party Advisory, VDB Entry
• http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.htmlVendor Advisory
• http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-19Exploit
• http://www.securityfocus.com/archive/1/500063/100/0/threaded
• http://www.securityfocus.com/bid/33260Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/0138Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47947Third Party Advisory, VDB Entry

Published

Jan 16, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3815Unspecified vulnerability in Cisco Adaptive Security Applian…
• CVE-2008-3816Unspecified vulnerability in Cisco Adaptive Security Applian…
• CVE-2008-3817Memory leak in Cisco Adaptive Security Appliances (ASA) 5500…
• CVE-2008-3818Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 1…
• CVE-2008-3819dnsserver in Cisco Application Control Engine Global Site Se…
• CVE-2008-3820Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco …
• CVE-2008-3822Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-3823Cross-site scripting (XSS) vulnerability in MIME/MIME/Conten…
• CVE-2008-3824Cross-site scripting (XSS) vulnerability in (1) Text_Filter/…
• CVE-2008-3825pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and ear…
• CVE-2008-3826Unspecified vulnerability in Condor before 7.0.5 allows atta…
• CVE-2008-3827Multiple integer underflows in the Real demuxer (demux_real.…