JVNDB-2005-000774

[Japanese]
JVNDB-2005-000774
SFS cross-site scripting vulnerability
Overview
A cross-site scripting vulnerability exists in SFS (Server-type Filtering System) provided by the New Media Development Association.
CVSS Severity (What is CVSS?)
CVSS V2 Severity: Base Metrics 5.0 (Medium) [IPA Score] Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
Affected Products

New Media Development Association SFS Version 3.02

Impact
When SFS is used for web browsing and a browsing request is filtered, an arbitrary script could be executed on the user's web browser. This may allow a remote attacker to steal cookie information from a website.
Solution

Vendor Information
New Media Development Association New Media Development Association : Top Page (Japanese) New Media Development Association : SFS3.02a and 3.02a Update module (Japanese) New Media Development Association : Top Page (Japanese)
CWE (What is CWE?)

CVE (What is CVE?)

References
JVN : JVN#7B700088
Revision History
[2008/05/21] Web page published

SFS cross-site scripting vulnerability