CVE

Id
33796  
CVE No.
CVE-2008-3679  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a (1) user_add, (2) recip, (3) tellafriend, or (4) contact action, or (5) in a request without an action; or (6) the id parameter in a tellafriend action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20080814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368591 33796 CVE-2008-3679 MISC:http://www.securityfocus.com/bid/30665/exploit  View
368592 33796 CVE-2008-3679 BID:30665  View
368593 33796 CVE-2008-3679 URL:http://www.securityfocus.com/bid/30665  View
368594 33796 CVE-2008-3679 SECUNIA:31487  View
368595 33796 CVE-2008-3679 URL:http://secunia.com/advisories/31487  View
368596 33796 CVE-2008-3679 XF:phplinkexchange-index-xss(44418)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50836 JVNDB-2008-006146 Sun Java System Web Proxy Server の FTP サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 Sun Java System Web Proxy Server の FTP サブシステムは、ファイルの記述子が枯渇する不備があるため、サービス運用妨害 (接続の受け入れ失敗) 状態となる脆弱性が存在します。 CVE-2008-3683 33796 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006146.html  View