CVE

Id
37099  
CVE No.
CVE-2008-6982  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403159 37099 CVE-2008-6982 MILW0RM:6369  View
403160 37099 CVE-2008-6982 URL:http://www.milw0rm.com/exploits/6369  View
403161 37099 CVE-2008-6982 CONFIRM:http://sourceforge.net/projects/devalcms/files/devalcms/devalcms-1.4b/devalcms-1.4b.zip/download  View
403162 37099 CVE-2008-6982 BID:31037  View
403163 37099 CVE-2008-6982 URL:http://www.securityfocus.com/bid/31037  View
403164 37099 CVE-2008-6982 OSVDB:47971  View
403165 37099 CVE-2008-6982 URL:http://osvdb.org/47971  View
403166 37099 CVE-2008-6982 XF:devalcms-currentpath-xss(44940)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44651 JVNDB-2009-005658 Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 Zen Cart の includes/classes/shopping_cart.php の actionMultipleAddProduct 関数には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-6986 37099 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005658.html  View