CVE-2008-6666 - CVE House
Back to Database
Status published Medium CVE-2008-6666

Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6666

Credits & Attribution

No credits recorded in the NVD database.

References

More from kronos

View All →
CVE-2020-8496
In Kronos Web Time and Attendance (webTA) 4.1.x and later...
Medium 6.9
CVE-2020-8495
In Kronos Web Time and Attendance (webTA) 3.8.x and later...
High 7.5
CVE-2020-8494
In Kronos Web Time and Attendance (webTA) 3.8.x and later...
High 7.5
CVE-2020-8493
A stored XSS vulnerability in Kronos Web Time and Attendance...
Medium 6.9
CVE-2020-35604
An XXE attack can occur in Kronos WebTA 5.0.4 when...
Critical 9.8

Affected Vendor

Affected Software

kronos webta
Vulnerable Versions:
Unknown

Timeline

Official Publish: April 8th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.