NVD

Id
6658  
Name
CVE-2008-6927  
Description
Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allow remote attackers to inject arbitrary web script or HTML via the (1) localapp, (2) updatedir, (3) scriptpath_show, (4) domain_show, (5) thispage, (6) thisapp, and (7) currentversion parameters in an Upgrade action.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-08-10  
Modified Date
2009-08-11  
Seq
2008-6927  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38257 6658 CVE-2008-6927 6897  View
38258 6658 CVE-2008-6927 http://www.netenberg.com/forum/index.php?topic=6832  View
38259 6658 CVE-2008-6927 20081120 Re: Cpanel 11 Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani  View
38260 6658 CVE-2008-6927 20081120 Re: Cpanel 11 Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani  View
38261 6658 CVE-2008-6927 20081031 Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani  View
38262 6658 CVE-2008-6927 cpanel-autoinstall-xss(46253)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42050 JVNDB-2009-003057 cPanel の Fantastico De Luxe モジュール におけるクロスサイトスクリプティングの脆弱性 cPanel の Fantastico De Luxe モジュールの autoinstall4imagesgalleryupgrade.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6927 37040 CVE-2008-6927 6658 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003057.html 2009-08-10 2012-06-26 View