CVE

Id
34040  
CVE No.
CVE-2008-3923  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371900 34040 CVE-2008-3923 MILW0RM:6313  View
371901 34040 CVE-2008-3923 URL:http://www.milw0rm.com/exploits/6313  View
371902 34040 CVE-2008-3923 BID:30854  View
371903 34040 CVE-2008-3923 URL:http://www.securityfocus.com/bid/30854  View
371904 34040 CVE-2008-3923 SECUNIA:31599  View
371905 34040 CVE-2008-3923 URL:http://secunia.com/advisories/31599  View
371906 34040 CVE-2008-3923 SREASON:4220  View
371907 34040 CVE-2008-3923 URL:http://securityreason.com/securityalert/4220  View
371908 34040 CVE-2008-3923 XF:cmme-statistics-xss(44685)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50888 JVNDB-2008-006198 genmsgidx の Tiger における任意のファイルを上書きされる脆弱性 genmsgidx の Tiger には、任意のファイルを上書きされる、または削除される脆弱性が存在します。 CVE-2008-3927 34040 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006198.html  View