CVE

Id
30954  
CVE No.
CVE-2008-0837  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file.  
Phase
Assigned (20080220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329590 30954 CVE-2008-0837 BUGTRAQ:20080213 Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin)  View
329591 30954 CVE-2008-0837 URL:http://www.securityfocus.com/archive/1/archive/1/488109/100/0/threaded  View
329592 30954 CVE-2008-0837 CONFIRM:http://urbangiraffe.com/tracker/issues/show/60  View
329593 30954 CVE-2008-0837 BID:27791  View
329594 30954 CVE-2008-0837 URL:http://www.securityfocus.com/bid/27791  View
329595 30954 CVE-2008-0837 SECUNIA:28968  View
329596 30954 CVE-2008-0837 URL:http://secunia.com/advisories/28968  View
329597 30954 CVE-2008-0837 SREASON:3674  View
329598 30954 CVE-2008-0837 URL:http://securityreason.com/securityalert/3674  View
329599 30954 CVE-2008-0837 XF:searchunleashed-log-xss(40513)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48814 JVNDB-2008-004124 Joomla! および Mambo 用の Giorgio Nordo Ricette における SQL インジェクションの脆弱性 Joomla! および Mambo 用の Giorgio Nordo Ricette (com_ricetter) コンポーネントの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0841 30954 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004124.html  View