CVE

Id
31465  
CVE No.
CVE-2008-1348  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the chart parameter to modules.php.  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
336974 31465 CVE-2008-1348 BUGTRAQ:20080313 XSS in PHP-Nuke (eWeather module)  View
336975 31465 CVE-2008-1348 URL:http://www.securityfocus.com/archive/1/archive/1/489504/100/0/threaded  View
336976 31465 CVE-2008-1348 BID:28241  View
336977 31465 CVE-2008-1348 URL:http://www.securityfocus.com/bid/28241  View
336978 31465 CVE-2008-1348 SREASON:3744  View
336979 31465 CVE-2008-1348 URL:http://securityreason.com/securityalert/3744  View
336980 31465 CVE-2008-1348 XF:eweather-modules-xss(41205)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48929 JVNDB-2008-004239 ecms の search.php におけるディレクトリトラバーサルの脆弱性 EdiorCMS (ecms) の search.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-1352 31465 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004239.html  View