CVE

Id
32785  
CVE No.
CVE-2008-2668  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.  
Phase
Assigned (20080611)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354923 32785 CVE-2008-2668 BUGTRAQ:20080610 [web-app] yBlog 0.2.2.2 Multiple Remote Vulnerabilities  View
354924 32785 CVE-2008-2668 URL:http://www.securityfocus.com/archive/1/archive/1/493222/100/0/threaded  View
354925 32785 CVE-2008-2668 MILW0RM:5773  View
354926 32785 CVE-2008-2668 URL:http://www.milw0rm.com/exploits/5773  View
354927 32785 CVE-2008-2668 MISC:http://chroot.org/exploits/chroot_uu_009  View
354928 32785 CVE-2008-2668 BID:29629  View
354929 32785 CVE-2008-2668 URL:http://www.securityfocus.com/bid/29629  View
354930 32785 CVE-2008-2668 SECUNIA:30607  View
354931 32785 CVE-2008-2668 URL:http://secunia.com/advisories/30607  View
354932 32785 CVE-2008-2668 SREASON:3935  View
354933 32785 CVE-2008-2668 URL:http://securityreason.com/securityalert/3935  View
354934 32785 CVE-2008-2668 XF:yblog-searchuseruss-xss(42958)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47840 JVNDB-2008-003150 ErfurtWiki におけるディレクトリトラバーサルの脆弱性 ErfurtWiki には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2672 32785 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003150.html  View