CVE

Id
37859  
CVE No.
CVE-2009-0424  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in (1) administrator/manage.php or (2) administrator/trash.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411360 37859 CVE-2009-0424 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=907703  View
411361 37859 CVE-2009-0424 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=653720  View
411362 37859 CVE-2009-0424 BID:33292  View
411363 37859 CVE-2009-0424 URL:http://www.securityfocus.com/bid/33292  View
411364 37859 CVE-2009-0424 SECUNIA:33490  View
411365 37859 CVE-2009-0424 URL:http://secunia.com/advisories/33490  View
411366 37859 CVE-2009-0424 XF:anguestbook-sign1-xss(48018)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42217 JVNDB-2009-003224 DMXReady Secure Document Library の CategoryManager/upload_image_category.asp における SQL インジェクションの脆弱性 DMXReady Secure Document Library の CategoryManager/upload_image_category.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0428 37859 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003224.html  View