{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000017.html",
  "dc:date": "2009-04-07T17:06+09:00",
  "dcterms:issued": "2009-04-07T17:06+09:00",
  "dcterms:modified": "2009-04-07T17:06+09:00",
  "description": "XOOPS Cube Legacy from XOOPS Cube Project contains a cross-site scripting vulnerability. \r\n\r\nXOOPS Cube Legacy from XOOPS Cube Project is an open source contents management system. XOOPS Cube Legacy contains a cross-site scripting vulnerability.\r\n\r\nAccording to the developers, a XOOPS Cube Legacy distribution \"Hodajuku distribution\" and \"additional modules\" are not affected by this vulnerability. For more information, refer to the developers\u0027 website.\r\n\r\nTakeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developers under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000017.html",
  "sec:cpe": {
    "#text": "cpe:/a:xoops:xoops_cube_legacy",
    "@product": "XOOPS Cube Legacy",
    "@vendor": "XOOPS",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2009-000017",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN74747784/index.html",
      "@id": "JVN#74747784",
      "@source": "JVN"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000017.html",
      "@id": "JVNDB-2009-000017",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "XOOPS Cube Legacy cross-site scripting vulnerability"
}