CVE

Id
47333  
CVE No.
CVE-2010-4749  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and (3) action parameters to admin/index.php.  
Phase
Assigned (20110301)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517149 47333 CVE-2010-4749 EXPLOIT-DB:15743  View
517150 47333 CVE-2010-4749 URL:http://www.exploit-db.com/exploits/15743  View
517151 47333 CVE-2010-4749 MISC:http://packetstormsecurity.org/files/view/96731/blogcms-xsrfxss.txt  View
517152 47333 CVE-2010-4749 MISC:http://www.htbridge.ch/advisory/cross_site_scripting_vulnerability_in_blogcms.html  View
517153 47333 CVE-2010-4749 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_blogcms.html  View
517154 47333 CVE-2010-4749 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_blogcms_1.html  View
517155 47333 CVE-2010-4749 CONFIRM:http://blogcms.com/  View
517156 47333 CVE-2010-4749 SREASON:8112  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33730 JVNDB-2011-003972 LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 LightNEasy の LightNEasy.php は、強制された SQL エラーメッセージの処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-4753 47333 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003972.html  View