CVE

Id
37096  
CVE No.
CVE-2008-6979  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might be resultant from a separate SQL injection vulnerability.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403137 37096 CVE-2008-6979 BUGTRAQ:20080907 phpAdultSite CMS flaws  View
403138 37096 CVE-2008-6979 URL:http://www.securityfocus.com/archive/1/archive/1/496069/100/0/threaded  View
403139 37096 CVE-2008-6979 MISC:http://www.davidsopas.com/2008/09/phpadult-cms-exploit/  View
403140 37096 CVE-2008-6979 BID:31057  View
403141 37096 CVE-2008-6979 URL:http://www.securityfocus.com/bid/31057  View
403142 37096 CVE-2008-6979 OSVDB:47943  View
403143 37096 CVE-2008-6979 URL:http://osvdb.org/47943  View
403144 37096 CVE-2008-6979 SECUNIA:31793  View
403145 37096 CVE-2008-6979 URL:http://secunia.com/advisories/31793  View
403146 37096 CVE-2008-6979 XF:phpadultsitecms-asarchives-xss(44923)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42070 JVNDB-2009-003077 devalcms の modules/tool/hitcounter.php における PHP リモートファイルインクルージョンの脆弱性 devalcms の modules/tool/hitcounter.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2008-6983 37096 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003077.html  View