CVE

Id
33539  
CVE No.
CVE-2008-3422  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren).  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365133 33539 CVE-2008-3422 MLIST:[mono-devel-list] 20080726 [PATCH] HTML encode attributes that might need encoding  View
365134 33539 CVE-2008-3422 URL:http://lists.ximian.com/pipermail/mono-devel-list/2008-July/028633.html  View
365135 33539 CVE-2008-3422 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=413534  View
365136 33539 CVE-2008-3422 SUSE:SUSE-SR:2008:018  View
365137 33539 CVE-2008-3422 URL:http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html  View
365138 33539 CVE-2008-3422 UBUNTU:USN-826-1  View
365139 33539 CVE-2008-3422 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-826-1  View
365140 33539 CVE-2008-3422 BID:30471  View
365141 33539 CVE-2008-3422 URL:http://www.securityfocus.com/bid/30471  View
365142 33539 CVE-2008-3422 SECUNIA:31338  View
365143 33539 CVE-2008-3422 URL:http://secunia.com/advisories/31338  View
365144 33539 CVE-2008-3422 SECUNIA:31982  View
365145 33539 CVE-2008-3422 URL:http://secunia.com/advisories/31982  View
365146 33539 CVE-2008-3422 SECUNIA:36494  View
365147 33539 CVE-2008-3422 URL:http://secunia.com/advisories/36494  View
365148 33539 CVE-2008-3422 XF:mono-aspnet-xss(44229)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46283 JVNDB-2008-001593 Sun Solaris の picld におけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris の Solaris Platform Information and Control Library デーモン (picld) にはサービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2008-3426 33539 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001593.html  View