CVE

Id
41989  
CVE No.
CVE-2009-4554  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter to pop_send_to_friend.asp, related to a crafted onload attribute of an IMG element; or (2) an onload attribute in a sound tag.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460142 41989 CVE-2009-4554 BUGTRAQ:20091015 Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities  View
460143 41989 CVE-2009-4554 URL:http://www.securityfocus.com/archive/1/archive/1/507207/100/0/threaded  View
460144 41989 CVE-2009-4554 BID:36710  View
460145 41989 CVE-2009-4554 URL:http://www.securityfocus.com/bid/36710  View
460146 41989 CVE-2009-4554 SECUNIA:35733  View
460147 41989 CVE-2009-4554 URL:http://secunia.com/advisories/35733  View
460148 41989 CVE-2009-4554 VUPEN:ADV-2009-2957  View
460149 41989 CVE-2009-4554 URL:http://www.vupen.com/english/advisories/2009/2957  View
460150 41989 CVE-2009-4554 XF:snitzforums-m3u-xss(53803)  View
460151 41989 CVE-2009-4554 URL:http://xforce.iss.net/xforce/xfdb/53803  View
460152 41989 CVE-2009-4554 XF:snitzforums-popsendtofriend-xss(53804)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45585 JVNDB-2009-006592 Drupal 用の Image Assist モジュールにおける任意のノードタイトルを読まれる脆弱性 Drupal 用の Image Assist モジュールは、不特定のページに対する権限要件を適切に強制しないため、以下を読まれる脆弱性が存在します。 CVE-2009-4558 41989 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006592.html  View