CVE

Id
37094  
CVE No.
CVE-2008-6977  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403115 37094 CVE-2008-6977 MILW0RM:6357  View
403116 37094 CVE-2008-6977 URL:http://www.milw0rm.com/exploits/6357  View
403117 37094 CVE-2008-6977 MILW0RM:6420  View
403118 37094 CVE-2008-6977 URL:http://www.milw0rm.com/exploits/6420  View
403119 37094 CVE-2008-6977 BID:30996  View
403120 37094 CVE-2008-6977 URL:http://www.securityfocus.com/bid/30996  View
403121 37094 CVE-2008-6977 OSVDB:47915  View
403122 37094 CVE-2008-6977 URL:http://osvdb.org/47915  View
403123 37094 CVE-2008-6977 SECUNIA:31649  View
403124 37094 CVE-2008-6977 URL:http://secunia.com/advisories/31649  View
403125 37094 CVE-2008-6977 XF:aspwebalbum-album-xss(44878)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44649 JVNDB-2009-005656 phpAdultSite CMS の index.php における SQL インジェクションの脆弱性 phpAdultSite CMS の index.php は、エラーメッセージ内にパスをリークする不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2008-6981 37094 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005656.html  View