CVEブラウザに戻る

CVE-2008-2494

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.1990%

EPSS Percentile23.66th

Published2008年5月28日

Last Modified2026年4月23日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter.

Affected Platforms (CPE)

📦

Pancake

Zina

= 1.0_rc3

References & Advisories

🔗 http://www.securityfocus.com/archive/1/492593/100/0/threaded

🔗 http://www.securityfocus.com/bid/29367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42642

🔗 http://www.securityfocus.com/archive/1/492593/100/0/threaded

🔗 http://www.securityfocus.com/bid/29367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42642

関連する脆弱性情報

CVE-2007-030310.0

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential secur...

CVE-2005-46317.5

SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via...

CVE-2008-24957.5

Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot...

CVE-2008-279910.0

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1....