CVE

Id
33278  
CVE No.
CVE-2008-3161  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20080714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362297 33278 CVE-2008-3161 BID:30180  View
362298 33278 CVE-2008-3161 URL:http://www.securityfocus.com/bid/30180  View
362299 33278 CVE-2008-3161 XF:ibm-maximo-debug-xss(43730)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47935 JVNDB-2008-003245 fuzzylime (cms) の rss.php におけるディレクトリトラバーサルの脆弱性 fuzzylime (cms) の rss.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-3165 33278 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003245.html  View