CVE

Id
40682  
CVE No.
CVE-2009-3247  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject arbitrary web script or HTML via the action parameter to phprint.php. NOTE: the query_string vector is already covered by CVE-2008-3101.3.  
Phase
Assigned (20090918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446390 40682 CVE-2009-3247 MILW0RM:9450  View
446391 40682 CVE-2009-3247 URL:http://www.milw0rm.com/exploits/9450  View
446392 40682 CVE-2009-3247 MISC:http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/  View
446393 40682 CVE-2009-3247 MISC:http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt  View
446394 40682 CVE-2009-3247 BID:36062  View
446395 40682 CVE-2009-3247 URL:http://www.securityfocus.com/bid/36062  View
446396 40682 CVE-2009-3247 OSVDB:57240  View
446397 40682 CVE-2009-3247 URL:http://www.osvdb.org/57240  View
446398 40682 CVE-2009-3247 SECUNIA:36309  View
446399 40682 CVE-2009-3247 URL:http://secunia.com/advisories/36309  View
446400 40682 CVE-2009-3247 VUPEN:ADV-2009-2319  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57800 JVNDB-2007-006492 vtiger CRM の include/utils/ListViewUtils.php における制限を回避される脆弱性 vtiger CRM の include/utils/ListViewUtils.php には、制限を回避される、および以下を読まれる脆弱性が存在します。 CVE-2009-3251 40682 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006492.html  View