CVE

Id
10234  
CVE No.
CVE-2004-1807  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
70424 10234 CVE-2004-1807 BUGTRAQ:20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities  View
70425 10234 CVE-2004-1807 URL:http://marc.info/?l=bugtraq&m=107911090901744&w=2  View
70426 10234 CVE-2004-1807 CONFIRM:http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43  View
70427 10234 CVE-2004-1807 MISC:http://www.s-quadra.com/advisories/Adv-20040312.txt  View
70428 10234 CVE-2004-1807 BID:9856  View
70429 10234 CVE-2004-1807 URL:http://www.securityfocus.com/bid/9856  View
70430 10234 CVE-2004-1807 OSVDB:4230  View
70431 10234 CVE-2004-1807 URL:http://www.osvdb.org/4230  View
70432 10234 CVE-2004-1807 SECTRACK:1009403  View
70433 10234 CVE-2004-1807 URL:http://securitytracker.com/id?1009403  View
70434 10234 CVE-2004-1807 SECUNIA:11112  View
70435 10234 CVE-2004-1807 URL:http://secunia.com/advisories/11112  View
70436 10234 CVE-2004-1807 XF:cfwebstore-url-xss(15454)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62741 JVNDB-2004-000082 Metamail の extcompose コマンドにおけるシンボリックリンク攻撃を受ける脆弱性 Metamail には、extcompose コマンドにおいて指定するファイルの妥当性の確認を適切に行わない不備のため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2004-1808 10234 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000082.html  View