CVE-2008-5669

Published: Dec 19, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long message parameter.

Affected (1)

Products: Textpattern: Textpattern

Textpattern

1 product

Textpattern

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Textpattern Textpattern	Version 4.0.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://secunia.com/advisories/28793

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4786

Source: cve@mitre.org

http://textpattern.com/weblog/310/textpattern-406-released

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/487483/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27606

Source: cve@mitre.org

ExploitPatch

http://secunia.com/advisories/28793