CVE

Id
10466  
CVE No.
CVE-2004-2040  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) "email article to a friend" field, (3) "submit news" field, or (4) avmsg parameter to usersettings.php.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
72568 10466 CVE-2004-2040 BUGTRAQ:20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615]  View
72569 10466 CVE-2004-2040 URL:http://marc.info/?l=bugtraq&m=108588043007224&w=2  View
72570 10466 CVE-2004-2040 FULLDISC:20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615]  View
72571 10466 CVE-2004-2040 URL:http://marc.info/?l=full-disclosure&m=108586723116427&w=2  View
72572 10466 CVE-2004-2040 MISC:http://www.waraxe.us/index.php?modname=sa&id=31  View
72573 10466 CVE-2004-2040 BID:10436  View
72574 10466 CVE-2004-2040 URL:http://www.securityfocus.com/bid/10436  View
72575 10466 CVE-2004-2040 OSVDB:6526  View
72576 10466 CVE-2004-2040 URL:http://www.osvdb.org/6526  View
72577 10466 CVE-2004-2040 OSVDB:6527  View
72578 10466 CVE-2004-2040 URL:http://www.osvdb.org/6527  View
72579 10466 CVE-2004-2040 OSVDB:6528  View
72580 10466 CVE-2004-2040 URL:http://www.osvdb.org/6528  View
72581 10466 CVE-2004-2040 OSVDB:6529  View
72582 10466 CVE-2004-2040 URL:http://www.osvdb.org/6529  View
72583 10466 CVE-2004-2040 SECUNIA:11740  View
72584 10466 CVE-2004-2040 URL:http://secunia.com/advisories/11740  View
72585 10466 CVE-2004-2040 XF:e107-user-setting-xss(16281)  View
72586 10466 CVE-2004-2040 URL:http://xforce.iss.net/xforce/xfdb/16281  View
72587 10466 CVE-2004-2040 XF:e107-clock-menu-xss(16279)  View
72588 10466 CVE-2004-2040 URL:http://xforce.iss.net/xforce/xfdb/16279  View
72589 10466 CVE-2004-2040 XF:e107-email-friend-xss(16280)  View

Related JVN