CVE

Id
36357  
CVE No.
CVE-2008-6240  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.  
Phase
Assigned (20090223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
397723 36357 CVE-2008-6240 MISC:http://holisticinfosec.org/content/view/95/45/  View
397724 36357 CVE-2008-6240 BID:33063  View
397725 36357 CVE-2008-6240 URL:http://www.securityfocus.com/bid/33063  View
397726 36357 CVE-2008-6240 OSVDB:51028  View
397727 36357 CVE-2008-6240 URL:http://www.osvdb.org/51028  View
397728 36357 CVE-2008-6240 SECUNIA:33296  View
397729 36357 CVE-2008-6240 URL:http://secunia.com/advisories/33296  View
397730 36357 CVE-2008-6240 XF:openeditdam-catalogid-xss(47692)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44409 JVNDB-2009-005416 SFS EZ Gaming Cheats の view_reviews.php における SQL インジェクションの脆弱性 Scripts for Sites (SFS) EZ Gaming Cheats の view_reviews.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6244 36357 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005416.html  View