CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.

• http://github.com/sstephenson/prototype/blob/master/CHANGELOGRelease Notes, Third Party Advisory
• http://osvdb.org/46312Broken Link
• http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/May/10Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/May/11Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/May/13Mailing List, Third Party Advisory
• http://secunia.com/advisories/37479Third Party Advisory
• http://secunia.com/advisories/37677Third Party Advisory
• http://www.debian.org/security/2009/dsa-1952Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/11/07/2Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=523277Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=533137Issue Tracking, Not Applicable, Third Party Advisory
• https://lists.apache.org/thread.html/2ad48cd9d47edd0e677082eb869115809473a117e1e30b52fb511590%40%3Cissues.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/6d1b9a75a004dab42c81e8aa149d90e6fd26ce8cd6d71295e565e366%40%3Cissues.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/769fcc5f331b61c4d7ce16b807678e9a1799628d0146322e14aa24ed%40%3Cdev.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/7ba863c5a4a0f1230cba2d11cf4de3a2eda3a42e8023d4990f564327%40%3Cdev.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87%40%3Cnotifications.zookeeper.apache.org%3E
• https://seclists.org/bugtraq/2019/May/18Issue Tracking, Mailing List, Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.htmlBroken Link
• https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.htmlBroken Link
• http://github.com/sstephenson/prototype/blob/master/CHANGELOGRelease Notes, Third Party Advisory
• http://osvdb.org/46312Broken Link
• http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/May/10Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/May/11Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/May/13Mailing List, Third Party Advisory
• http://secunia.com/advisories/37479Third Party Advisory
• http://secunia.com/advisories/37677Third Party Advisory
• http://www.debian.org/security/2009/dsa-1952Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/11/07/2Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=523277Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=533137Issue Tracking, Not Applicable, Third Party Advisory
• https://lists.apache.org/thread.html/2ad48cd9d47edd0e677082eb869115809473a117e1e30b52fb511590%40%3Cissues.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/6d1b9a75a004dab42c81e8aa149d90e6fd26ce8cd6d71295e565e366%40%3Cissues.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/769fcc5f331b61c4d7ce16b807678e9a1799628d0146322e14aa24ed%40%3Cdev.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/7ba863c5a4a0f1230cba2d11cf4de3a2eda3a42e8023d4990f564327%40%3Cdev.zookeeper.apache.org%3E
• https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87%40%3Cnotifications.zookeeper.apache.org%3E
• https://seclists.org/bugtraq/2019/May/18Issue Tracking, Mailing List, Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.htmlBroken Link
• https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.htmlBroken Link

Published

Sep 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7214Cross-site request forgery (CSRF) vulnerability in administr…
• CVE-2008-7215The Image Manager in MOStlyCE before 2.4, as used in Mambo 4…
• CVE-2008-7216Peter's Math Anti-Spam Spinoff plugin for WordPress generate…
• CVE-2008-7217Microsoft Office 2008 for Mac, when running on Macintosh sys…
• CVE-2008-7218Unspecified vulnerability in the Horde API in Horde 3.1 befo…
• CVE-2008-7219Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; …
• CVE-2008-7221Cross-site request forgery (CSRF) vulnerability in RunCMS 1.…
• CVE-2008-7222Cross-site scripting (XSS) vulnerability in system/admin.php…
• CVE-2008-7223Multiple cross-site scripting (XSS) vulnerabilities in LinPH…
• CVE-2008-7224Buffer overflow in entity_cache in ELinks before 0.11.4rc0 a…
• CVE-2008-7225Heap-based buffer overflow in Foxit Remote Access Server (ak…
• CVE-2008-7226SQL injection vulnerability in index.php in the Recipes modu…