NVD

Id
3384  
Name
CVE-2008-3511  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or HTML via the (1) latest parameter to (a) index.php, (b) images.php, (c) suggest_image.php, and (d) image_desc.php; and the (2) msg parameter to index.php, images.php, and suggest_image.php, and (e) index.php, (f) adminhome.php, (g) config.php, (h) changepassword.php, (i) cleanup.php, (j) browsecats.php, and (k) images.php in admin/. NOTE: the image_desc.php/msg vector is covered by CVE-2006-1660. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-08-07  
Modified Date
2009-01-23  
Seq
2008-3511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21253 3384 CVE-2008-3511 30546  View
21254 3384 CVE-2008-3511 http://www.securityfocus.com/bid/30546/exploit  View
21255 3384 CVE-2008-3511 softbizimagegallery-latest-msg-xss(44433)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50800 JVNDB-2008-006110 Softbiz Photo Gallery におけるクロスサイトスクリプティングの脆弱性 Softbiz Image Gallery (Photo Gallery) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3511 33624 CVE-2008-3511 3384 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006110.html 2008-08-07 2012-12-20 View