ByteOS Network

CVE Vulnerability Details :

CVE-2008-7092

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-26 Aug, 2009 | 14:00

Updated At-07 Aug, 2024 | 11:56

▼CVE Numbering Authority (CNA)

Multiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to inject arbitrary web script or HTML via a Javascript event in the (1) url, (2) PageName, and (3) title parameters in a CustomBookMarkLink action to Campaign/Campaign; (4) a Javascript event in the displayIcon parameter to Campaign/updateOfferTemplateSubmit.do (aka the templates web page); (5) crafted input to Campaign/CampaignListener (aka the listener server), which is not properly handled when displaying the status log; and (6) id parameter to Campaign/campaignDetails.do, (7) id parameter to Campaign/offerDetails.do, (8) function parameter to Campaign/Campaign, (9) sessionID parameter to Campaign/runAllFlowchart.do, (10) id parameter in an edit action to Campaign/updateOfferTemplatePage.do, (11) Frame parameter in a LoadFrame action to Campaign/Campaign, (12) affiniumUserName parameter to manager/jsp/test.jsp, (13) affiniumUserName parameter to Campaign/main.do, and possibly other vectors.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/44073	vdb-entry x_refsource_XF
http://www.osvdb.org/47528	vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/31280	third-party-advisory x_refsource_SECUNIA
http://www.osvdb.org/47524	vdb-entry x_refsource_OSVDB
http://www.securityfocus.com/bid/30433	vdb-entry x_refsource_BID
http://www.osvdb.org/47520	vdb-entry x_refsource_OSVDB
http://www.osvdb.org/47523	vdb-entry x_refsource_OSVDB
http://www.osvdb.org/47526	vdb-entry x_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/44074	vdb-entry x_refsource_XF
http://www.osvdb.org/47530	vdb-entry x_refsource_OSVDB
http://www.portcullis.co.uk/289.php	x_refsource_MISC
http://www.osvdb.org/47522	vdb-entry x_refsource_OSVDB
http://www.portcullis.co.uk/290.php	x_refsource_MISC
http://www.osvdb.org/47525	vdb-entry x_refsource_OSVDB
http://www.portcullis.co.uk/286.php	x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/44072	vdb-entry x_refsource_XF
http://www.osvdb.org/47521	vdb-entry x_refsource_OSVDB
http://www.portcullis.co.uk/288.php	x_refsource_MISC

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44073

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.osvdb.org/47528

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://secunia.com/advisories/31280

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.osvdb.org/47524

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.securityfocus.com/bid/30433

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.osvdb.org/47520

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.osvdb.org/47523

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.osvdb.org/47526

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44074

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.osvdb.org/47530

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.portcullis.co.uk/289.php

Resource:

x_refsource_MISC

Hyperlink: http://www.osvdb.org/47522

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.portcullis.co.uk/290.php

Resource:

x_refsource_MISC

Hyperlink: http://www.osvdb.org/47525

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.portcullis.co.uk/286.php

Resource:

x_refsource_MISC

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/44072

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.osvdb.org/47521

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.portcullis.co.uk/288.php

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/44073	vdb-entry x_refsource_XF x_transferred
http://www.osvdb.org/47528	vdb-entry x_refsource_OSVDB x_transferred
http://secunia.com/advisories/31280	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.osvdb.org/47524	vdb-entry x_refsource_OSVDB x_transferred
http://www.securityfocus.com/bid/30433	vdb-entry x_refsource_BID x_transferred
http://www.osvdb.org/47520	vdb-entry x_refsource_OSVDB x_transferred
http://www.osvdb.org/47523	vdb-entry x_refsource_OSVDB x_transferred
http://www.osvdb.org/47526	vdb-entry x_refsource_OSVDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/44074	vdb-entry x_refsource_XF x_transferred
http://www.osvdb.org/47530	vdb-entry x_refsource_OSVDB x_transferred
http://www.portcullis.co.uk/289.php	x_refsource_MISC x_transferred
http://www.osvdb.org/47522	vdb-entry x_refsource_OSVDB x_transferred
http://www.portcullis.co.uk/290.php	x_refsource_MISC x_transferred
http://www.osvdb.org/47525	vdb-entry x_refsource_OSVDB x_transferred
http://www.portcullis.co.uk/286.php	x_refsource_MISC x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/44072	vdb-entry x_refsource_XF x_transferred
http://www.osvdb.org/47521	vdb-entry x_refsource_OSVDB x_transferred
http://www.portcullis.co.uk/288.php	x_refsource_MISC x_transferred