Refine your search
2 vulnerabilities found for WEB PATIO by KENT-WEB
jvndb-2012-000061
Vulnerability from jvndb
Published
2012-06-19 14:31
Modified
2012-06-19 14:31
Summary
WEB PATIO vulnerable to cross-site scripting
Details
WEB PATIO contains a cross-site scripting vulnerability.
WEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling web form entries, which may result in cross-site scripting.
Yuji Tounai of bogus.jp reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000061.html",
"dc:date": "2012-06-19T14:31+09:00",
"dcterms:issued": "2012-06-19T14:31+09:00",
"dcterms:modified": "2012-06-19T14:31+09:00",
"description": "WEB PATIO contains a cross-site scripting vulnerability.\r\n\r\nWEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling web form entries, which may result in cross-site scripting.\r\n\r\nYuji Tounai of bogus.jp reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000061.html",
"sec:cpe": {
"#text": "cpe:/a:kent-web:web_patio",
"@product": "WEB PATIO",
"@vendor": "KENT-WEB",
"@version": "2.2"
},
"sec:cvss": {
"@score": "4.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2012-000061",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN33171616/index.html",
"@id": "JVN#33171616",
"@source": "JVN"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2636",
"@id": "CVE-2012-2636",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2636",
"@id": "CVE-2012-2636",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-79",
"@title": "Cross-site Scripting(CWE-79)"
}
],
"title": "WEB PATIO vulnerable to cross-site scripting"
}
jvndb-2012-000062
Vulnerability from jvndb
Published
2012-06-19 12:35
Modified
2012-06-19 12:35
Summary
WEB PATIO vulnerable to cross-site scripting
Details
WEB PATIO contains a cross-site scripting vulnerability.
WEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling cookies, which may result in cross-site scripting.
Taketo Ikeuchi of Hitachi Solutions, Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000062.html",
"dc:date": "2012-06-19T12:35+09:00",
"dcterms:issued": "2012-06-19T12:35+09:00",
"dcterms:modified": "2012-06-19T12:35+09:00",
"description": "WEB PATIO contains a cross-site scripting vulnerability.\r\n\r\nWEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling cookies, which may result in cross-site scripting.\r\n\r\nTaketo Ikeuchi of Hitachi Solutions, Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000062.html",
"sec:cpe": {
"#text": "cpe:/a:kent-web:web_patio",
"@product": "WEB PATIO",
"@vendor": "KENT-WEB",
"@version": "2.2"
},
"sec:cvss": {
"@score": "2.6",
"@severity": "Low",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2012-000062",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN58102473/index.html",
"@id": "JVN#58102473",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2637",
"@id": "CVE-2012-2637",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2637",
"@id": "CVE-2012-2637",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-79",
"@title": "Cross-site Scripting(CWE-79)"
}
],
"title": "WEB PATIO vulnerable to cross-site scripting"
}