CVE

Id
40718  
CVE No.
CVE-2009-3283  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.  
Phase
Assigned (20090921)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446622 40718 CVE-2009-3283 CONFIRM:http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html  View
446623 40718 CVE-2009-3283 JVN:JVN#53591199  View
446624 40718 CVE-2009-3283 URL:http://jvn.jp/en/jp/JVN53591199/index.html  View
446625 40718 CVE-2009-3283 JVNDB:JVNDB-2009-000063  View
446626 40718 CVE-2009-3283 URL:http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html  View
446627 40718 CVE-2009-3283 SECUNIA:36783  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43958 JVNDB-2009-004965 Thin Web サーバの lib/thin/connection.rb における IP アドレスをなりすまされる脆弱性 Thin Web サーバの lib/thin/connection.rb は、クライアントの IP アドレスの決定を X-Forwarded-For ヘッダに頼るため、IP アドレスをなりすまされる、および活動を隠される脆弱性が存在します。 CVE-2009-3287 40718 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004965.html  View