CVE

Id
41957  
CVE No.
CVE-2009-4522  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20091231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
459753 41957 CVE-2009-4522 MISC:http://packetstormsecurity.org/0910-exploits/bloofoxcms-xss.txt  View
459754 41957 CVE-2009-4522 BID:36700  View
459755 41957 CVE-2009-4522 URL:http://www.securityfocus.com/bid/36700  View
459756 41957 CVE-2009-4522 OSVDB:58948  View
459757 41957 CVE-2009-4522 URL:http://osvdb.org/58948  View
459758 41957 CVE-2009-4522 SECUNIA:37020  View
459759 41957 CVE-2009-4522 URL:http://secunia.com/advisories/37020  View
459760 41957 CVE-2009-4522 XF:bloofoxcms-index-xss(53788)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44257 JVNDB-2009-005264 Drupal 用の Print モジュールの電子メールサブモジュールにおけるページタイトルを読まれる脆弱性 Drupal 用の Print モジュールの電子メールサブモジュールは、資格要件を適切に実行しないため、ページタイトルを読まれる脆弱性が存在します。 CVE-2009-4526 41957 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005264.html  View