CVE

Id
39927  
CVE No.
CVE-2009-2492  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438809 39927 CVE-2009-2492 JVN:JVN#86472161  View
438810 39927 CVE-2009-2492 URL:http://jvn.jp/en/jp/JVN86472161/index.html  View
438811 39927 CVE-2009-2492 JVNDB:JVNDB-2009-000042  View
438812 39927 CVE-2009-2492 URL:http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html  View
438813 39927 CVE-2009-2492 BID:35885  View
438814 39927 CVE-2009-2492 URL:http://www.securityfocus.com/bid/35885  View
438815 39927 CVE-2009-2492 SECUNIA:35534  View
438816 39927 CVE-2009-2492 URL:http://secunia.com/advisories/35534  View
438817 39927 CVE-2009-2492 VUPEN:ADV-2009-1668  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41020 JVNDB-2009-002026 Microsoft Office の Office Web Components ActiveX Control におけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Office の Office Web Components ActiveX Control には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-2496 39927 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002026.html  View