NVD

Id
1908  
Name
CVE-2008-1972  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-04-27  
Modified Date
2010-03-29  
Seq
2008-1972  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12375 1908 CVE-2008-1972 http://sourceforge.net/project/shownotes.php?release_id=592961&group_id=118524  View
12376 1908 CVE-2008-1972 28834  View
12377 1908 CVE-2008-1972 exponentcms-newaccount-xss(41878)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49066 JVNDB-2008-004376 Exponent CMS のユーザアカウント作成機能におけるクロスサイトスクリプティングの脆弱性 Exponent CMS のユーザアカウント作成機能は、Allow Registration? 設定が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1972 32085 CVE-2008-1972 1908 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004376.html 2008-04-27 2012-09-25 View