返回 CVE 浏览器

CVE-2008-3739

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.0190%

EPSS Percentile41.12th

Published2008年8月27日

Last Modified2026年4月23日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences.

Affected Platforms (CPE)

📦

Spacetag

Lacoodast

<= 2.1.3

📦

System Consultants

La Cooda Wiz

<= 1.4.0

References & Advisories

🔗 http://jvn.jp/en/jp/JVN27417220/index.html

🔗 http://jvn.jp/en/jp/JVN52557009/index.html

🔗 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html

🔗 http://secunia.com/advisories/31574

🔗 http://secunia.com/advisories/31582

🔗 http://wiz.syscon.co.jp/Details.htm

🔗 http://www.securityfocus.com/bid/30791

🔗 http://www.spacetag.jp/modules/products/index.php?id=54

相关漏洞威胁

CVE-2008-373710.0

Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier al...

CVE-2008-37389.1

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecif...

CVE-2008-37366.0

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceT...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...