CVE

Id
31747  
CVE No.
CVE-2008-1630  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, and (6) showtemplates.php in pages/.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341349 31747 CVE-2008-1630 BUGTRAQ:20080329 CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities  View
341350 31747 CVE-2008-1630 URL:http://www.securityfocus.com/archive/1/archive/1/490305/100/0/threaded  View
341351 31747 CVE-2008-1630 BID:28500  View
341352 31747 CVE-2008-1630 URL:http://www.securityfocus.com/bid/28500  View
341353 31747 CVE-2008-1630 SECUNIA:29612  View
341354 31747 CVE-2008-1630 URL:http://secunia.com/advisories/29612  View
341355 31747 CVE-2008-1630 SREASON:3792  View
341356 31747 CVE-2008-1630 URL:http://securityreason.com/securityalert/3792  View
341357 31747 CVE-2008-1630 XF:cuteflow-language-xss(41537)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48982 JVNDB-2008-004292 JV2 Folder Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 JV2 Folder Gallery の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1634 31747 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004292.html  View