CVE

Id
37348  
CVE No.
CVE-2008-7231  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title).  
Phase
Assigned (20090914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
404991 37348 CVE-2008-7231 MISC:http://labs.mwrinfosecurity.com/advisories/meridio_cross_site_scripting_vulnerability/  View
404992 37348 CVE-2008-7231 MISC:http://labs.mwrinfosecurity.com/files/Advisories/mwri_meridio-advisory-embedded-xss_2008-01-15.pdf  View
404993 37348 CVE-2008-7231 BID:27721  View
404994 37348 CVE-2008-7231 URL:http://www.securityfocus.com/bid/27721  View
404995 37348 CVE-2008-7231 XF:documentsandrecordsmanagement-title-xss(40422)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41141 JVNDB-2009-002148 Oracle Application Server および E-Business Suite の Oracle Forms コンポーネントにおける脆弱性 Oracle Application Server および E-Business Suite の Oracle Forms コンポーネントには、完全性に影響のある脆弱性が存在します。 CVE-2008-7235 37348 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002148.html  View