CVE

Id
44296  
CVE No.
CVE-2010-1712  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482924 44296 CVE-2010-1712 MISC:http://inj3ct0r.com/exploits/11914  View
482925 44296 CVE-2010-1712 EXPLOIT-DB:12323  View
482926 44296 CVE-2010-1712 URL:http://www.exploit-db.com/exploits/12323  View
482927 44296 CVE-2010-1712 MISC:http://www.hack0wn.com/view.php?xroot=1310.0&cat=exploits  View
482928 44296 CVE-2010-1712 MISC:http://www.itsecteam.com/en/vulnerabilities/vulnerability44.htm  View
482929 44296 CVE-2010-1712 BID:39626  View
482930 44296 CVE-2010-1712 URL:http://www.securityfocus.com/bid/39626  View
482931 44296 CVE-2010-1712 OSVDB:63973  View
482932 44296 CVE-2010-1712 URL:http://www.osvdb.org/63973  View
482933 44296 CVE-2010-1712 SECUNIA:39516  View
482934 44296 CVE-2010-1712 URL:http://secunia.com/advisories/39516  View
482935 44296 CVE-2010-1712 XF:wbnews-comments-xss(58025)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38968 JVNDB-2010-004753 Joomla! 用の Agenda Address Book コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用の Agenda Address Book (com_agenda) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2010-1716 44296 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004753.html  View