CVE

Id
37359  
CVE No.
CVE-2008-7242  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.  
Phase
Assigned (20090917)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
405156 37359 CVE-2008-7242 BUGTRAQ:20080207 [DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities  View
405157 37359 CVE-2008-7242 URL:http://www.securityfocus.com/archive/1/archive/1/487696/100/200/threaded  View
405158 37359 CVE-2008-7242 BID:27672  View
405159 37359 CVE-2008-7242 URL:http://www.securityfocus.com/bid/27672  View
405160 37359 CVE-2008-7242 OSVDB:41232  View
405161 37359 CVE-2008-7242 URL:http://osvdb.org/41232  View
405162 37359 CVE-2008-7242 SECUNIA:28840  View
405163 37359 CVE-2008-7242 URL:http://secunia.com/advisories/28840  View
405164 37359 CVE-2008-7242 XF:modx-index-multiple-xss(40375)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47179 JVNDB-2008-002489 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome には、window.print 関数に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-7246 37359 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002489.html  View