CVEvulnerability
CVE-2008-3739
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences.
Affected configurations
• spacetag lacoodast (<= 2.1.3)
• system consultants la cooda wiz (<= 1.4.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN27417220/index.html jvn.jp
- http://jvn.jp/en/jp/JVN52557009/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html jvndb.jvn.jp
- http://secunia.com/advisories/31574 Vendor Advisory
- http://secunia.com/advisories/31582 Vendor Advisory
- http://wiz.syscon.co.jp/Details.htm wiz.syscon.co.jp
- http://www.securityfocus.com/bid/30791 www.securityfocus.com
- http://www.spacetag.jp/modules/products/index.php?id=54 www.spacetag.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44593 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN27417220/index.html jvn.jp
- http://jvn.jp/en/jp/JVN52557009/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html jvndb.jvn.jp
- http://secunia.com/advisories/31574 Vendor Advisory
- http://secunia.com/advisories/31582 Vendor Advisory
- http://wiz.syscon.co.jp/Details.htm wiz.syscon.co.jp
- http://www.securityfocus.com/bid/30791 www.securityfocus.com
- http://www.spacetag.jp/modules/products/index.php?id=54 www.spacetag.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44593 exchange.xforce.ibmcloud.com