CVE-2008-0642: adobe robohelp Cross-site Scripting

EPSS trend

Probability

1.28%

Chance of exploitation in the next 30 days

Percentile

70%

Versus all other CVEs

30-day change

0.00 pp

From 1.28% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

5 links

www.adobe.com/support/security/bulletins/apsb08-05.htmlX Refsource CONFIRM
secunia.com/advisories/28945Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1019397VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/27763VDB EntryX Refsource BIDPatch
www.vupen.com/english/advisories/2008/0537VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2013-5327adoberobohelp3.84%13y ago09-10-2013 14:44MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2021-21070adoberobohelp1.60%5y ago19-04-2021 12:28Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.CVE-2007-1280adoberobohelp+14.89%19y ago09-05-2007 22:00Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcsh_home.htm in WebHelp, (3) wf_startpage.js and (4) wf_startqs.htm in FlashHelp, or (5) WindowManager.dll in RoboHelp Server 6.CVE-2016-1035adoberobohelp3.54%10y ago12-04-2016 23:00Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.CVE-2016-7891adoberobohelp3.20%9y ago15-12-2016 06:31Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.CVE-2022-30670adoberobohelp+11.49%4y ago16-06-2022 16:56RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.

All vulnerabilities inrobohelp

CVE-2008-0642: adobe robohelp Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References