NVD

Id
694  
Name
CVE-2008-0723  
Description
Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-02-11  
Modified Date
2008-09-05  
Seq
2008-0723  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
4469 694 CVE-2008-0723 20080206 MyNews 1.6.X HTML/JS Injection Vulnerability  View
4470 694 CVE-2008-0723 20080207 Re: MyNews 1.6.X HTML/JS Injection Vulnerability  View
4471 694 CVE-2008-0723 27652  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50157 JVNDB-2008-005467 MyNews の mynews.inc.php におけるクロスサイトスクリプティングの脆弱性 MyNews の mynews.inc.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0723 30836 CVE-2008-0723 694 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005467.html 2008-02-11 2012-12-20 View