CVE

Id
40215  
CVE No.
CVE-2009-2780  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
441982 40215 CVE-2009-2780 MISC:http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt  View
441983 40215 CVE-2009-2780 OSVDB:56564  View
441984 40215 CVE-2009-2780 URL:http://www.osvdb.org/56564  View
441985 40215 CVE-2009-2780 OSVDB:56565  View
441986 40215 CVE-2009-2780 URL:http://www.osvdb.org/56565  View
441987 40215 CVE-2009-2780 OSVDB:56566  View
441988 40215 CVE-2009-2780 URL:http://www.osvdb.org/56566  View
441989 40215 CVE-2009-2780 OSVDB:56567  View
441990 40215 CVE-2009-2780 URL:http://www.osvdb.org/56567  View
441991 40215 CVE-2009-2780 OSVDB:56568  View
441992 40215 CVE-2009-2780 URL:http://www.osvdb.org/56568  View
441993 40215 CVE-2009-2780 OSVDB:56569  View
441994 40215 CVE-2009-2780 URL:http://www.osvdb.org/56569  View
441995 40215 CVE-2009-2780 SECUNIA:36034  View
441996 40215 CVE-2009-2780 URL:http://secunia.com/advisories/36034  View
441997 40215 CVE-2009-2780 XF:68classifieds-multiple-xss(52071)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42670 JVNDB-2009-003677 dit.cms におけるディレクトリトラバーサルの脆弱性 dit.cms には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-2784 40215 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003677.html  View