NVD

Id
47749  
Name
CVE-2009-0417  
Description
Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not strictly follow RFC 3986, such as Internet Explorer 6 and 7.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-02-10  
Modified Date
2009-03-13  
Seq
2009-0417  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239311 47749 CVE-2009-0417 http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability  View
239312 47749 CVE-2009-0417 http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability  View
239313 47749 CVE-2009-0417 http://trac.agavi.org/ticket/1019  View
239314 47749 CVE-2009-0417 33826  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42212 JVNDB-2009-003219 Agavi の AgaviWebRouting::gen(null) メソッドにおけるクロスサイトスクリプティングの脆弱性 Agavi の AgaviWebRouting::gen(null) メソッドは、RFC 3986 に厳密に準拠していないIneternet Explorer 6 および 7 などの Web ブラウザが特定の文字を適切に処理しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0417 37848 CVE-2009-0417 47749 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003219.html 2009-02-10 2012-06-26 View