NVD

Id
1572  
Name
CVE-2008-1630  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, and (6) showtemplates.php in pages/.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-04-02  
Modified Date
2008-09-05  
Seq
2008-1630  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10178 1572 CVE-2008-1630 3792  View
10179 1572 CVE-2008-1630 20080329 CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities  View
10180 1572 CVE-2008-1630 28500  View
10181 1572 CVE-2008-1630 cuteflow-language-xss(41537)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47602 JVNDB-2008-002912 CuteFlow におけるクロスサイトスクリプティングの脆弱性 CuteFlow には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1630 31743 CVE-2008-1630 1572 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002912.html 2008-04-02 2012-06-26 View