CVE

Id
32248  
CVE No.
CVE-2008-2131  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."  
Phase
Assigned (20080509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348271 32248 CVE-2008-2131 BUGTRAQ:20080506 mvnForum 1.1 Cross Site Scripting  View
348272 32248 CVE-2008-2131 URL:http://www.securityfocus.com/archive/1/archive/1/491713/100/0/threaded  View
348273 32248 CVE-2008-2131 MISC:http://users.own-hero.net/~decoder/advisories/mvnforum-jsxss.txt  View
348274 32248 CVE-2008-2131 CONFIRM:http://mvnforum.cvs.sourceforge.net/mvnforum/mvnforum/srcweb/mvnplugin/mvnforum/user/viewthread.jsp?r1=1.316&r2=1.317  View
348275 32248 CVE-2008-2131 BID:29075  View
348276 32248 CVE-2008-2131 URL:http://www.securityfocus.com/bid/29075  View
348277 32248 CVE-2008-2131 SECUNIA:30091  View
348278 32248 CVE-2008-2131 URL:http://secunia.com/advisories/30091  View
348279 32248 CVE-2008-2131 SREASON:3862  View
348280 32248 CVE-2008-2131 URL:http://securityreason.com/securityalert/3862  View
348281 32248 CVE-2008-2131 XF:mvnforum-quickreply-xss(42241)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50459 JVNDB-2008-005769 VisualShapers ezContents における SQL インジェクションの脆弱性 VisualShapers ezContents には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2135 32248 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005769.html  View