NVD

Id
1209  
Name
CVE-2008-1250  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-10  
Modified Date
2008-12-10  
Seq
2008-1250  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7717 1209 CVE-2008-1250 http://www.gnucitizen.org/projects/router-hacking-challenge/  View
7718 1209 CVE-2008-1250 20080301 The Router Hacking Challenge is Over!  View
7719 1209 CVE-2008-1250 27767  View
7720 1209 CVE-2008-1250 snom-sipphone-addressbook-csrf(40500)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50251 JVNDB-2008-005561 Snom 320 SIP Phone 用の中央電話サーバ上で稼動する Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 Snom 320 SIP Phone 用の中央電話サーバ上で稼動する Web インターフェースには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-1250 31363 CVE-2008-1250 1209 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005561.html 2008-03-10 2012-12-20 View