NVD

Id
3535  
Name
CVE-2008-3668  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to (1) friends.php, (2) seutubo.php, (3) album.php, (4) scrapbook.php, (5) index.php, or (6) tribes.php; or (7) the description field of a new scrap.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-08-13  
Modified Date
2008-09-05  
Seq
2008-3668  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
22385 3535 CVE-2008-3668 http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html  View
22386 3535 CVE-2008-3668 30618  View
22387 3535 CVE-2008-3668 30619  View
22388 3535 CVE-2008-3668 yogurtsocialnetwork-uid-xss(44385)  View
22389 3535 CVE-2008-3668 yogurtsocialnetwork-scrapbook-xss(44387)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49446 JVNDB-2008-004756 XOOPS 用の Yogurt Social Network モジュールにおけるクロスサイトスクリプティングの脆弱性 XOOPS 用の Yogurt Social Network モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3668 33781 CVE-2008-3668 3535 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004756.html 2008-08-13 2012-09-25 View