CVE

Id
34296  
CVE No.
CVE-2008-4179  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to smileys.php and the (2) q parameter to search.php.  
Phase
Assigned (20080923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375539 34296 CVE-2008-4179 BUGTRAQ:20080911 Nooms 1.1  View
375540 34296 CVE-2008-4179 URL:http://www.securityfocus.com/archive/1/archive/1/496236/100/0/threaded  View
375541 34296 CVE-2008-4179 BID:31131  View
375542 34296 CVE-2008-4179 URL:http://www.securityfocus.com/bid/31131  View
375543 34296 CVE-2008-4179 SECUNIA:31859  View
375544 34296 CVE-2008-4179 URL:http://secunia.com/advisories/31859  View
375545 34296 CVE-2008-4179 SREASON:4289  View
375546 34296 CVE-2008-4179 URL:http://securityreason.com/securityalert/4289  View
375547 34296 CVE-2008-4179 XF:nooms-smileys-search-xss(45074)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49570 JVNDB-2008-004880 IntegraMOD におけるバックアップをダウンロードされる脆弱性 IntegraMOD は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、バックアップをダウンロードされる脆弱性が存在します。 CVE-2008-4183 34296 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004880.html  View