NVD

Id
4260  
Name
CVE-2008-4435  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to search.php and the (2) id parameter to down.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2009-07-23  
Seq
2008-4435  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27034 4260 CVE-2008-4435 http://lostmon.blogspot.com/2008/08/rmsoft-downloads-plus-two-scripts-two.html  View
27035 4260 CVE-2008-4435 30620  View
27036 4260 CVE-2008-4435 downloadsplus-search-down-xss(44376)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50965 JVNDB-2008-006275 Xoops 用の rmdp モジュールにおけるクロスサイトスクリプティングの脆弱性 Xoops 用の RMSOFT Downloads Plus (rmdp) モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4435 34548 CVE-2008-4435 4260 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006275.html 2008-10-03 2012-12-20 View