CVE-2008-5720

Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.

Link	Resource
http://mayaa.seasar.org/news/vulnerability20081225.html
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html
http://jvn.jp/en/jp/JVN17298485/index.html
http://secunia.com/advisories/33333
http://osvdb.org/51007
http://www.securityfocus.com/bid/33015
https://exchange.xforce.ibmcloud.com/vulnerabilities/47623

Configuration 1

cpe:2.3:a:seasar:mayaa:1.1.0:beta3:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.14:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.1.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:*:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.19:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.2:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.0:beta6:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.9:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.0:beta3:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.0:beta5:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.15:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.10:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.12:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.5:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.14:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.1.0f:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.12:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.6:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.15:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.3:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.3.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.1:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.6:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.19:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.1.2:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.7:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.0:beta1:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.1.3:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.4:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.10:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.9:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.18:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.13:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.8:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.16:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.1.1:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.8:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.20:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.20:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.18:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.2:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.21:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.7:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.2.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.11:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.0:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.13:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.20a:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.17:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.17:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.0.0:rc1:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.0:beta4:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.0:beta2:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:0.9.7.1:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.11:*:*:*:*:*:*:* cpe:2.3:a:seasar:mayaa:1.1.16:*:*:*:*:*:*:*

---

Published : 2008-12-26 05:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5720

Mitre link : CVE-2008-5720

No products.

CWE-79