CVE

Id
40947  
CVE No.
CVE-2009-3512  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to user_addfood.php, info parameter to (2) user_forgot_pwd_form.php and (3) user_login.php, and (4) return parameter to user_login.php.  
Phase
Assigned (20091001)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448384 40947 CVE-2009-3512 MISC:http://packetstormsecurity.org/0907-exploits/myweight-xss.txt  View
448385 40947 CVE-2009-3512 OSVDB:55997  View
448386 40947 CVE-2009-3512 URL:http://www.osvdb.org/55997  View
448387 40947 CVE-2009-3512 OSVDB:55998  View
448388 40947 CVE-2009-3512 URL:http://www.osvdb.org/55998  View
448389 40947 CVE-2009-3512 OSVDB:55999  View
448390 40947 CVE-2009-3512 URL:http://www.osvdb.org/55999  View
448391 40947 CVE-2009-3512 SECUNIA:35919  View
448392 40947 CVE-2009-3512 URL:http://secunia.com/advisories/35919  View
448393 40947 CVE-2009-3512 XF:myweight-date-xss(51861)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41187 JVNDB-2009-002194 IBM AIX の gssd における Kerberized NFSv4 共有のアクセス制限を回避される脆弱性 IBM AIX の gssd には、NFSv4 Kerberos 証明書キャッシュを適切に処理しないため、Kerberized NFSv4 共有のアクセス制限を回避される脆弱性が存在します。 CVE-2009-3516 40947 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002194.html  View