CVE

Id
36093  
CVE No.
CVE-2008-5976  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the UserName field.  
Phase
Assigned (20090126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395942 36093 CVE-2008-5976 MISC:http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt  View
395943 36093 CVE-2008-5976 BID:32570  View
395944 36093 CVE-2008-5976 URL:http://www.securityfocus.com/bid/32570  View
395945 36093 CVE-2008-5976 SECUNIA:30686  View
395946 36093 CVE-2008-5976 URL:http://secunia.com/advisories/30686  View
395947 36093 CVE-2008-5976 XF:phpjobwebsitepro-forgot-security-bypass(46999)  View
395948 36093 CVE-2008-5976 URL:http://xforce.iss.net/xforce/xfdb/46999  View
395949 36093 CVE-2008-5976 XF:phpjobwebsitepro-forgot-xss(46997)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43078 JVNDB-2009-004085 Ocean12 Mailing List Manager Gold におけるデータベースをダウンロードされる脆弱性 Ocean12 Mailing List Manager Gold は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、データベースをダウンロードされる脆弱性が存在します。 CVE-2008-5980 36093 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004085.html  View