CVE

Id
32243  
CVE No.
CVE-2008-2126  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to index.php and the (2) returnURL parameter to tux-login.php.  
Phase
Assigned (20080509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348241 32243 CVE-2008-2126 BUGTRAQ:20080507 Multiple XSS In TuxCMS All Version  View
348242 32243 CVE-2008-2126 URL:http://marc.info/?l=bugtraq&m=121019103418967&w=2  View
348243 32243 CVE-2008-2126 BID:29090  View
348244 32243 CVE-2008-2126 URL:http://www.securityfocus.com/bid/29090  View
348245 32243 CVE-2008-2126 OSVDB:44917  View
348246 32243 CVE-2008-2126 URL:http://osvdb.org/44917  View
348247 32243 CVE-2008-2126 SECUNIA:30121  View
348248 32243 CVE-2008-2126 URL:http://secunia.com/advisories/30121  View
348249 32243 CVE-2008-2126 XF:tuxcms-multiple-xss(42252)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49098 JVNDB-2008-004408 iGaming CMS の poll_vote.php における SQL インジェクションの脆弱性 iGaming CMS の poll_vote.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2130 32243 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004408.html  View