CVE-2008-2236 - Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable)

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable)

Published Oct 3, 2008

4.3

MEDIUM

CVSS 2.0

EPSS 1.25%

Description

Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable). NOTE: some of these details are obtained from third party information.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

http://jvn.jp/en/jp/JVN03300113/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000073.html
third-party-advisoryx_refsource_JVNDB
http://secunia.com/advisories/32074
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=630149
x_refsource_CONFIRM
http://www.securityfocus.com/bid/31535
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2233
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45600
vdb-entryx_refsource_XF

Link	Providers	Tags
http://jvn.jp/en/jp/JVN03300113/index.html		third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000073.html		third-party-advisoryx_refsource_JVNDB
http://secunia.com/advisories/32074		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=630149		x_refsource_CONFIRM
http://www.securityfocus.com/bid/31535		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2233		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45600		vdb-entryx_refsource_XF