CVE

Id
30937  
CVE No.
CVE-2008-0820  
Status
Candidate  
Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $_SERVER["PHP_INFO"]. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $_SERVER["PHP_SELF"], and "This is not an Etomite specific exploit and I would like the report rescinded."  
Phase
Assigned (20080219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329485 30937 CVE-2008-0820 BUGTRAQ:20080214 etomite xss  View
329486 30937 CVE-2008-0820 URL:http://www.securityfocus.com/archive/1/archive/1/488122/100/0/threaded  View
329487 30937 CVE-2008-0820 BUGTRAQ:20080218 Re: etomite xss  View
329488 30937 CVE-2008-0820 URL:http://www.securityfocus.com/archive/1/archive/1/488304/100/100/threaded  View
329489 30937 CVE-2008-0820 MISC:http://www.etomite.com/forums/index.php?showtopic=7647  View
329490 30937 CVE-2008-0820 BID:27794  View
329491 30937 CVE-2008-0820 URL:http://www.securityfocus.com/bid/27794  View
329492 30937 CVE-2008-0820 SECUNIA:28964  View
329493 30937 CVE-2008-0820 URL:http://secunia.com/advisories/28964  View
329494 30937 CVE-2008-0820 SREASON:3669  View
329495 30937 CVE-2008-0820 URL:http://securityreason.com/securityalert/3669  View
329496 30937 CVE-2008-0820 XF:etomite-index-xss(40525)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47429 JVNDB-2008-002739 Claroline の php2phps 関数における詳細不明な脆弱性 Claroline の php2phps 関数には、詳細不明な脆弱性が存在します。 CVE-2008-0824 30937 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002739.html  View