NVD

Id
3207  
Name
CVE-2008-3326  
Description
Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title).  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-07-25  
Modified Date
2009-08-19  
Seq
2008-3326  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20334 3207 CVE-2008-3326 SUSE-SR:2008:016  View
20335 3207 CVE-2008-3326 http://moodle.org/mod/forum/discuss.php?d=101401  View
20336 3207 CVE-2008-3326 DSA-1691  View
20337 3207 CVE-2008-3326 6653  View
20338 3207 CVE-2008-3326 http://www.procheckup.com/Vulnerability_PR08-13.php  View
20339 3207 CVE-2008-3326 20080722 PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title  View
20340 3207 CVE-2008-3326 30348  View
20341 3207 CVE-2008-3326 moodle-edit-xss(43961)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49356 JVNDB-2008-004666 Moodle の blog/edit.php におけるクロスサイトスクリプティングの脆弱性 Moodle の blog/edit.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3326 33439 CVE-2008-3326 3207 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004666.html 2008-07-16 2012-09-25 View