NVD

Id
51959  
Name
CVE-2009-4842  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) addNewDept, (2) deptId, or (3) deptDesc parameter to tvserver/server/user/addDepartment.jsp; or the (4) firstName, (5) lastName, or (6) email parameter in a save action to tvserver/user/user.do. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2010-05-07  
Modified Date
2010-05-21  
Seq
2009-4842  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39355 JVNDB-2010-005140 ToutVirtual VirtualIQ Pro におけるクロスサイトスクリプティングの脆弱性 ToutVirtual VirtualIQ Pro には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4842 42273 CVE-2009-4842 51959 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005140.html 2010-05-07 2012-12-20 View