NVD

Id
3196  
Name
CVE-2008-3315  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the (1) query string to (a) announcements/messages.php; (b) lostPassword.php and (c) profile.php in auth/; (d) calendar/myagenda.php; (e) group/group.php; (f) learningPath.php, (g) learningPathList.php, and (h) module.php in learnPath/; (i) phpbb/index.php; (j) courseLog.php, (k) course_access_details.php, (l) delete_course_stats.php, (m) userLog.php, and (n) user_access_details.php in tracking/; (o) user/user.php; and (p) user/userInfo.php; the (2) view parameter to (q) tracking/courseLog.php; and the (3) toolId parameter to (r) tracking/toolaccess_details.php. NOTE: this may overlap CVE-2006-3257 and CVE-2005-1374.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-07-25  
Modified Date
2011-03-07  
Seq
2008-3315  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20276 3196 CVE-2008-3315 4041  View
20277 3196 CVE-2008-3315 http://sourceforge.net/project/shownotes.php?release_id=615030  View
20278 3196 CVE-2008-3315 http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.10_and_1.8.11  View
20279 3196 CVE-2008-3315 20080722 [DSECRG-08-032] Claroline 1.8.10 Multiple XSS Vulnerabilities  View
20280 3196 CVE-2008-3315 30346  View
20281 3196 CVE-2008-3315 ADV-2008-2167  View
20282 3196 CVE-2008-3315 claroline-courselog-toolaccess-xss(43962)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47983 JVNDB-2008-003293 Claroline におけるクロスサイトスクリプティングの脆弱性 Claroline には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3315 33428 CVE-2008-3315 3196 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003293.html 2008-07-25 2012-06-26 View