CVE

Id
31766  
CVE No.
CVE-2008-1649  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341509 31766 CVE-2008-1649 BUGTRAQ:20080401 EasyNews-40tr Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI)  View
341510 31766 CVE-2008-1649 URL:http://www.securityfocus.com/archive/1/archive/1/490338/100/0/threaded  View
341511 31766 CVE-2008-1649 MILW0RM:5333  View
341512 31766 CVE-2008-1649 URL:http://www.milw0rm.com/exploits/5333  View
341513 31766 CVE-2008-1649 BID:28542  View
341514 31766 CVE-2008-1649 URL:http://www.securityfocus.com/bid/28542  View
341515 31766 CVE-2008-1649 SECUNIA:29624  View
341516 31766 CVE-2008-1649 URL:http://secunia.com/advisories/29624  View
341517 31766 CVE-2008-1649 SREASON:3793  View
341518 31766 CVE-2008-1649 URL:http://securityreason.com/securityalert/3793  View
341519 31766 CVE-2008-1649 XF:easynews-index-xss(41593)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50344 JVNDB-2008-005654 Sava"s Link Manager の index.php におけるディレクトリトラバーサルの脆弱性 Sava"s Link Manager の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-1653 31766 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005654.html  View