CVE

Id
35837  
CVE No.
CVE-2008-5720  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.  
Phase
Assigned (20081226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
394011 35837 CVE-2008-5720 CONFIRM:http://mayaa.seasar.org/news/vulnerability20081225.html  View
394012 35837 CVE-2008-5720 JVN:JVN#17298485  View
394013 35837 CVE-2008-5720 URL:http://jvn.jp/en/jp/JVN17298485/index.html  View
394014 35837 CVE-2008-5720 JVNDB:JVNDB-2008-000085  View
394015 35837 CVE-2008-5720 URL:http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html  View
394016 35837 CVE-2008-5720 BID:33015  View
394017 35837 CVE-2008-5720 URL:http://www.securityfocus.com/bid/33015  View
394018 35837 CVE-2008-5720 OSVDB:51007  View
394019 35837 CVE-2008-5720 URL:http://osvdb.org/51007  View
394020 35837 CVE-2008-5720 SECUNIA:33333  View
394021 35837 CVE-2008-5720 URL:http://secunia.com/advisories/33333  View
394022 35837 CVE-2008-5720 XF:mayaa-errorpage-xss(47623)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48462 JVNDB-2008-003772 Personal Firewall ドライバおよび ESET Smart Security における権限を取得される脆弱性 Personal Firewall ドライバおよび ESET Smart Security には、権限を取得される脆弱性が存在します。 CVE-2008-5724 35837 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003772.html  View