CVE

Id
76297  
CVE No.
CVE-2014-8996  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) author_name or (2) content parameter to index.php.  
Phase
Assigned (20141119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
703289 76297 CVE-2014-8996 FULLDISC:20141117 Reflected XSS in Nibbleblog <= v4.0.1  View
703290 76297 CVE-2014-8996 URL:http://seclists.org/fulldisclosure/2014/Nov/38  View
703291 76297 CVE-2014-8996 MISC:http://packetstormsecurity.com/files/129133/Nibbleblog-4.0.1-Cross-Site-Scripting.html  View
703292 76297 CVE-2014-8996 CONFIRM:http://blog.nibbleblog.com/post/nibbleblog-v4.0.2-coffee/  View
703293 76297 CVE-2014-8996 BID:71111  View
703294 76297 CVE-2014-8996 URL:http://www.securityfocus.com/bid/71111  View
703295 76297 CVE-2014-8996 XF:nibbleblog-index-xss(98738)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16681 JVNDB-2014-005556 vldPersonals におけるクロスサイトスクリプティングの脆弱性 vldPersonals には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-9004 76297 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005556.html  View