CVE

Id
44011  
CVE No.
CVE-2010-1427  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
480363 44011 CVE-2010-1427 CONFIRM:http://modxcms.com/forums/index.php/topic,47759.msg280304.html#msg280304  View
480364 44011 CVE-2010-1427 JVN:JVN#46669729  View
480365 44011 CVE-2010-1427 URL:http://jvn.jp/en/jp/JVN46669729/index.html  View
480366 44011 CVE-2010-1427 JVNDB:JVNDB-2010-000013  View
480367 44011 CVE-2010-1427 URL:http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html  View
480368 44011 CVE-2010-1427 SECUNIA:39298  View
480369 44011 CVE-2010-1427 URL:http://secunia.com/advisories/39298  View
480370 44011 CVE-2010-1427 XF:modx-unspecified-xss(57635)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43017 JVNDB-2009-004024 Cacti の templates_export.php における SQL インジェクションの脆弱性 Cacti の templates_export.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-1431 44011 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004024.html  View