CVE

Id
33297  
CVE No.
CVE-2008-3180  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO.  
Phase
Assigned (20080715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362473 33297 CVE-2008-3180 MILW0RM:6011  View
362474 33297 CVE-2008-3180 URL:http://www.milw0rm.com/exploits/6011  View
362475 33297 CVE-2008-3180 BID:30102  View
362476 33297 CVE-2008-3180 URL:http://www.securityfocus.com/bid/30102  View
362477 33297 CVE-2008-3180 SECUNIA:30888  View
362478 33297 CVE-2008-3180 URL:http://secunia.com/advisories/30888  View
362479 33297 CVE-2008-3180 SREASON:3990  View
362480 33297 CVE-2008-3180 URL:http://securityreason.com/securityalert/3990  View
362481 33297 CVE-2008-3180 XF:contentnow-languagemenu-xss(43610)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50708 JVNDB-2008-006018 vBulletin におけるクロスサイトスクリプティングの脆弱性 vBulletin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3184 33297 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006018.html  View