CVE-2008-2236

Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable). NOTE: some of these details are obtained from third party information.

Link	Resource
http://sourceforge.net/project/shownotes.php?release_id=630149
http://secunia.com/advisories/32074	Vendor Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000073.html
http://jvn.jp/en/jp/JVN03300113/index.html
http://www.securityfocus.com/bid/31535
https://exchange.xforce.ibmcloud.com/vulnerabilities/45600

Configuration 1

cpe:2.3:a:blosxom:blosxom:2.0-4:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.7:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:*:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.9:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:1.0:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.8:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0-3:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:0.1.5:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:blosxom:blosxom:2.0.5:*:*:*:*:*:*:*

---

Published : 2008-10-03 03:07

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-2236

Mitre link : CVE-2008-2236

No products.

CWE-79