CVE

Id
37890  
CVE No.
CVE-2009-0455  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411566 37890 CVE-2009-0455 MISC:http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf  View
411567 37890 CVE-2009-0455 CONFIRM:http://www.glfusion.org/article.php/xsscomments  View
411568 37890 CVE-2009-0455 BID:33683  View
411569 37890 CVE-2009-0455 URL:http://www.securityfocus.com/bid/33683  View
411570 37890 CVE-2009-0455 SECUNIA:33878  View
411571 37890 CVE-2009-0455 URL:http://secunia.com/advisories/33878  View
411572 37890 CVE-2009-0455 XF:glfusion-libcomment-xss(48603)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44790 JVNDB-2009-005797 Whole Hog Password Protect の admin/login_submit.php における SQL インジェクションの脆弱性 Whole Hog Password Protect の admin/login_submit.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0459 37890 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005797.html  View