CVE

Id
31502  
CVE No.
CVE-2008-1385  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.  
Phase
Assigned (20080318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337976 31502 CVE-2008-1385 BUGTRAQ:20080422 Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))  View
337977 31502 CVE-2008-1385 URL:http://www.securityfocus.com/archive/1/archive/1/491176/100/0/threaded  View
337978 31502 CVE-2008-1385 FULLDISC:20080422 Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))  View
337979 31502 CVE-2008-1385 URL:http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.html  View
337980 31502 CVE-2008-1385 MISC:http://int21.de/cve/CVE-2008-1385-s9y.html  View
337981 31502 CVE-2008-1385 CONFIRM:http://blog.s9y.org/archives/193-Serendipity-1.3.1-released.html  View
337982 31502 CVE-2008-1385 BID:28885  View
337983 31502 CVE-2008-1385 URL:http://www.securityfocus.com/bid/28885  View
337984 31502 CVE-2008-1385 VUPEN:ADV-2008-1348  View
337985 31502 CVE-2008-1385 URL:http://www.vupen.com/english/advisories/2008/1348/references  View
337986 31502 CVE-2008-1385 SECTRACK:1019915  View
337987 31502 CVE-2008-1385 URL:http://www.securitytracker.com/id?1019915  View
337988 31502 CVE-2008-1385 SECUNIA:29942  View
337989 31502 CVE-2008-1385 URL:http://secunia.com/advisories/29942  View
337990 31502 CVE-2008-1385 XF:topreferrers-referer-xss(41965)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46498 JVNDB-2008-001808 ClamAV の CHM ファイルの処理におけるサービス運用妨害 (DoS) の脆弱性 ClamAV の chm-parser における libclamav/chmunpack.c には、CHM ファイルの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1389 31502 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001808.html  View