NVD

Id
115  
Name
CVE-2008-0124  
Description
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via (1) the "Real name" field in Personal Settings, which is presented to readers of articles; or (2) a file upload, as demonstrated by a .htm, .html, or .js file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-02-28  
Modified Date
2011-03-07  
Seq
2008-0124  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1074 115 CVE-2008-0124 http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html  View
1075 115 CVE-2008-0124 http://int21.de/cve/CVE-2008-0124-s9y.html  View
1076 115 CVE-2008-0124 DSA-1528  View
1077 115 CVE-2008-0124 28003  View
1078 115 CVE-2008-0124 1019502  View
1079 115 CVE-2008-0124 ADV-2008-0700  View
1080 115 CVE-2008-0124 serendipity-realname-username-xss(40851)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50004 JVNDB-2008-005314 S9Y におけるクロスサイトスクリプティングの脆弱性 Serendipity (S9Y) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0124 30237 CVE-2008-0124 115 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005314.html 2008-02-25 2012-12-20 View