製品・ソフトウェアに関する情報

JVN脆弱性詳細

WikyBlog におけるクロスサイトスクリプティングの脆弱性

Title	WikyBlog におけるクロスサイトスクリプティングの脆弱性
Summary	WikyBlog には、クロスサイトスクリプティングの脆弱性が存在します。
Possible impacts	第三者により、以下を介して、任意の Web スクリプトまたは HTML を挿入される可能性があります。 (1) index.php/Special/Main/keywordSearch への key パラメータ (2) index.php/Edit/Main/Home への revNum パラメータ (3) index.php/Special/Main/WhatLinksHere への to パラメータ (4) index.php/Special/Main/UserEdits への user パラメータ (5) index.php への PATH_INFO
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Feb. 9, 2009, midnight
Registration Date	Dec. 20, 2012, 7:10 p.m.
Last Update	Dec. 20, 2012, 7:10 p.m.

CVSS2.0 : 警告
Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected System

wikyblog

wikyblog 1.7.1 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2008-6097	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6097
National Vulnerability Database (NVD)
2	CVE-2008-6097	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-6097

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-79	https://jvndb.jvn.jp/ja/cwe/CWE-79.html

ベンダー情報

No	Name	URL
wikyblog
1	Top Page	http://www.wikyblog.com/

Change Log

No	Changed Details	Date of change
0	[2012年12月20日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2008-6097

Summary	Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSearch, (2) revNum parameter to index.php/Edit/Main/Home, (3) to parameter to index.php/Special/Main/WhatLinksHere, (4) user parameter to index.php/Special/Main/UserEdits, and (5) the PATH_INFO to index.php.
Publication Date	Feb. 10, 2009, 2:30 a.m.
Registration Date	Jan. 29, 2021, 1:48 p.m.
Last Update	Aug. 8, 2017, 10:33 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:wikyblog:wikyblog:1.2.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.2.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.2.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.3.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.7:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.8:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.9:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.10:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.11:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.12:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.13:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.14:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.15:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.0.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.0.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.7:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6b1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6b2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6b3:::::::*
cpe:2.3:a:wikyblog:wikyblog::::::::		1.7
cpe:2.3:a:wikyblog:wikyblog:1.7:rc1::::::
cpe:2.3:a:wikyblog:wikyblog:1.7:rc2::::::
cpe:2.3:a:wikyblog:wikyblog:1.7:rc3::::::
cpe:2.3:a:wikyblog:wikyblog:1.7.0.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7.1:rc1::::::
cpe:2.3:a:wikyblog:wikyblog:1.7.1:rc2::::::
cpe:2.3:a:wikyblog:wikyblog:1.7.1.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7.1b1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7.1b2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7b1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7b2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7b3:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://osvdb.org/48790	OSVDB
2	http://secunia.com/advisories/32087	SECUNIA	Vendor Advisory
3	http://sourceforge.net/project/shownotes.php?group_id=148518&release_id=647444	MISC
4	http://www.digitrustgroup.com/advisories/web-application-security-wikyblog.html	MISC
5	http://www.securityfocus.com/bid/31525	BID	Exploit
6	https://exchange.xforce.ibmcloud.com/vulnerabilities/45603	XF

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-79	クロスサイト・スクリプティング（XSS）	https://cwe.mitre.org/data/definitions/79.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:wikyblog:wikyblog:1.2.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.2.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.2.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.3.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.7:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.8:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.9:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.10:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.11:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.12:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.13:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.14:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.4.15:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.0.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.0.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.5.7.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.3:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.4:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.5:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.6:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6.1.7:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6b1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6b2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.6b3:::::::*
cpe:2.3:a:wikyblog:wikyblog::::::::		1.7
cpe:2.3:a:wikyblog:wikyblog:1.7:rc1::::::
cpe:2.3:a:wikyblog:wikyblog:1.7:rc2::::::
cpe:2.3:a:wikyblog:wikyblog:1.7:rc3::::::
cpe:2.3:a:wikyblog:wikyblog:1.7.0.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7.1:rc1::::::
cpe:2.3:a:wikyblog:wikyblog:1.7.1:rc2::::::
cpe:2.3:a:wikyblog:wikyblog:1.7.1.1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7.1b1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7.1b2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7b1:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7b2:::::::*
cpe:2.3:a:wikyblog:wikyblog:1.7b3:::::::*