CVE-2008-4876
Last modified
CVE-2008-4876 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page.. EPSS estimates a 1.80% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Philips Electronics | Voip841 Dect Phone | 1.0.4.48 |
| Philips Electronics | Voip841 Dect Phone | 1.0.4.50 |
References
- http://secunia.com/advisories/28978Vendor Advisory
- http://secunia.com/advisories/28978Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4876?
How severe is CVE-2008-4876?
How do I fix CVE-2008-4876?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4870dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and poss…
- CVE-2008-4871Cross-site scripting (XSS) vulnerability in My Little Forum …
- CVE-2008-4872Cross-site scripting (XSS) vulnerability in bidhistory.php i…
- CVE-2008-4873board.cgi in Sepal SPBOARD 4.5 allows remote attackers to ex…
- CVE-2008-4874The web component in Philips Electronics VOIP841 DECT Phone …
- CVE-2008-4875Directory traversal vulnerability in the web server in Phili…
- CVE-2008-4877SQL injection vulnerability in admin.php in WebCards 1.3, wh…
- CVE-2008-4878Unrestricted file upload vulnerability in the "Add Image Mac…
- CVE-2008-4879SQL injection vulnerability in prod.php in Maran PHP Shop al…
- CVE-2008-4880SQL injection vulnerability in prodshow.php in Maran PHP Sho…
- CVE-2008-4881SQL injection vulnerability in tr.php in YourFreeWorld Remin…
- CVE-2008-4882SQL injection vulnerability in tr.php in YourFreeWorld Autor…
Are you affected by CVE-2008-4876?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST