CVE

Id
32250  
CVE No.
CVE-2008-2133  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demonstrated by a CSS property in the STYLE attribute of a DIV element, a different vulnerability than CVE-2008-1873.  
Phase
Assigned (20080509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348289 32250 CVE-2008-2133 MISC:http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/  View
348290 32250 CVE-2008-2133 CONFIRM:http://truzone.org/modules.php?name=Forums&file=viewtopic&t=55141  View
348291 32250 CVE-2008-2133 BID:29080  View
348292 32250 CVE-2008-2133 URL:http://www.securityfocus.com/bid/29080  View
348293 32250 CVE-2008-2133 SECUNIA:30061  View
348294 32250 CVE-2008-2133 URL:http://secunia.com/advisories/30061  View
348295 32250 CVE-2008-2133 XF:nukeet-journalentry-xss(42238)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47733 JVNDB-2008-003043 Linux kernel 内の arch/sparc/kernel/sys_sparc.c におけるサービス運用妨害 (DoS) の脆弱性 (1) Linux kernel 内の arch/sparc/kernel/sys_sparc.c の sparc_mmap_check 関数および (2) Linux kernel 内の arch/sparc64/kernel/sys_sparc.c の sparc64_mmap_check 関数は、mmap MAP_FIXED ビットが設定されていない際、仮想アドレス範囲のチェックを省略するため、サービス運用妨害 (パニック) 状態となる脆弱性が存在します。 CVE-2008-2137 32250 4.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003043.html  View