CVE

Id
45282  
CVE No.
CVE-2010-2698  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when (1) editing a new blog, (2) adding an album, or (3) editing an album. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20100712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493459 45282 CVE-2010-2698 EXPLOIT-DB:14260  View
493460 45282 CVE-2010-2698 URL:http://www.exploit-db.com/exploits/14260  View
493461 45282 CVE-2010-2698 OSVDB:66154  View
493462 45282 CVE-2010-2698 URL:http://osvdb.org/66154  View
493463 45282 CVE-2010-2698 SECUNIA:40492  View
493464 45282 CVE-2010-2698 URL:http://secunia.com/advisories/40492  View
493465 45282 CVE-2010-2698 XF:sijio-title-xss(60176)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38421 JVNDB-2010-004206 Unreal エンジンの UGameEngine::UpdateConnectingMessage 関数におけるバッファオーバーフローの脆弱性 Unreal Tournament、Postal、Raven Shield および SWAT などのゲーム製品で使用されている Unreal エンジンの UGameEngine::UpdateConnectingMessage 関数には、ダウンロードが有効になっている際、バッファオーバーフローの脆弱性が存在します。 CVE-2010-2702 45282 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004206.html  View