CVE

Id
36329  
CVE No.
CVE-2008-6212  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the (1) sel_mese and (2) sel_anno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20090219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
397471 36329 CVE-2008-6212 MISC:http://www.juniper.net/security/auto/vulnerabilities/vuln28824.html  View
397472 36329 CVE-2008-6212 MISC:http://www.securityfocus.com/bid/28824/exploit  View
397473 36329 CVE-2008-6212 BID:28824  View
397474 36329 CVE-2008-6212 URL:http://www.securityfocus.com/bid/28824  View
397475 36329 CVE-2008-6212 XF:phpstats-admin-xss(42729)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41836 JVNDB-2009-002843 Venalsur Booking Centre Booking System の cadena_ofertas_ext.php における SQL インジェクションの脆弱性 Hotels Group の Venalsur Booking Centre Booking System の cadena_ofertas_ext.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6216 36329 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002843.html  View