CVE

Id
32763  
CVE No.
CVE-2008-2646  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, (3) InsertBibliography parameter to insert_mask.inc.php, and (4) LabelYear parameter to search_mask.inc.php.  
Phase
Assigned (20080610)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354567 32763 CVE-2008-2646 MILW0RM:5716  View
354568 32763 CVE-2008-2646 URL:http://www.milw0rm.com/exploits/5716  View
354569 32763 CVE-2008-2646 BID:29465  View
354570 32763 CVE-2008-2646 URL:http://www.securityfocus.com/bid/29465  View
354571 32763 CVE-2008-2646 SECUNIA:30488  View
354572 32763 CVE-2008-2646 URL:http://secunia.com/advisories/30488  View
354573 32763 CVE-2008-2646 XF:mebiblio-multiple-scripts-xss(42760)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47837 JVNDB-2008-003147 CMSimple の cmsimple/cms.php におけるディレクトリトラバーサルの脆弱性 CMSimple の cmsimple/cms.php には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2650 32763 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003147.html  View