CVE

Id
38145  
CVE No.
CVE-2009-0710  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the user parameter to login.php or (2) the dbfield parameter to filter.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20090223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
414940 38145 CVE-2009-0710 OSVDB:51103  View
414941 38145 CVE-2009-0710 URL:http://www.osvdb.org/51103  View
414942 38145 CVE-2009-0710 OSVDB:51105  View
414943 38145 CVE-2009-0710 URL:http://osvdb.org/51105  View
414944 38145 CVE-2009-0710 SECUNIA:33367  View
414945 38145 CVE-2009-0710 URL:http://secunia.com/advisories/33367  View
414946 38145 CVE-2009-0710 XF:phpfootball-filter-xss(47719)  View
414947 38145 CVE-2009-0710 URL:http://xforce.iss.net/xforce/xfdb/47719  View
414948 38145 CVE-2009-0710 XF:phpfootball-login-xss(47721)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43484 JVNDB-2009-004491 HP Data Protector Express の dpwingad.exe におけるサービス運用妨害 (DoS) の脆弱性 HP Data Protector Express の dpwingad (dpwingad.exe) の dpwinsup モジュール (dpwinsup.dll) には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる、およびメモリの一部を読み取られる脆弱性が存在します。 CVE-2009-0714 38145 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004491.html  View