CVE

Id
47341  
CVE No.
CVE-2010-4757  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews_title parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this might be the same as CVE-2009-4083.1 or CVE-2011-0457.  
Phase
Assigned (20110315)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517203 47341 CVE-2010-4757 MISC:http://www.madirish.net/?article=471  View
517204 47341 CVE-2010-4757 CONFIRM:http://e107.org/comment.php?comment.news.872  View
517205 47341 CVE-2010-4757 CONFIRM:http://e107.org/svn_changelog.php?version=0.7.23  View
517206 47341 CVE-2010-4757 CONFIRM:http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/e107_admin/newspost.php?r1=11655&r2=11654&pathrev=11655  View
517207 47341 CVE-2010-4757 SECTRACK:1024351  View
517208 47341 CVE-2010-4757 URL:http://securitytracker.com/id?1024351  View
517209 47341 CVE-2010-4757 XF:e107-submitnewstitle-xss(61331)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33738 JVNDB-2011-003980 OTRS の顧客インターフェースチケット印刷ダイアログにおける重要な情報を取得される脆弱性 Open Ticket Request System (OTRS) の顧客インターフェースのチケット印刷ダイアログは、適切に顧客可視データを制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-4761 47341 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003980.html  View