Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
1 vulnerability found for XOOPS Cube by XOOPS
JVNDB-2005-000864
Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00Summary
XOOPS cross-site scripting vulnerability
Details
XOOPS is an open source web content management system implemented in PHP.
XOOPS itself and its forum modules have multiple vulnerabilities in validating private messages and forum articles.
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000864.html",
"dc:date": "2008-05-21T00:00+09:00",
"dcterms:issued": "2008-05-21T00:00+09:00",
"dcterms:modified": "2008-05-21T00:00+09:00",
"description": "XOOPS is an open source web content management system implemented in PHP.\r\n\r\nXOOPS itself and its forum modules have multiple vulnerabilities in validating private messages and forum articles.",
"link": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000864.html",
"sec:cpe": {
"#text": "cpe:/a:xoops:xoops_cube",
"@product": "XOOPS Cube",
"@vendor": "XOOPS",
"@version": "2.2"
},
"sec:cvss": {
"@score": "4.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2005-000864",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN77105349/index.html",
"@id": "JVN#77105349",
"@source": "JVN"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2338",
"@id": "CVE-2005-2338",
"@source": "CVE"
},
{
"#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2005-2338",
"@id": "CVE-2005-2338",
"@source": "NVD"
},
{
"#text": "http://secunia.com/advisories/17300",
"@id": "SA17300",
"@source": "SECUNIA"
},
{
"#text": "http://www.securityfocus.com/bid/15195",
"@id": "15195",
"@source": "BID"
}
],
"title": "XOOPS cross-site scripting vulnerability"
}