CVE

Id
12988  
CVE No.
CVE-2005-1782  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_review.htm, (3) suggest_category.htm, (4) add_booklist.htm, or (5) add_url.htm, the isbn parameter to (6) add_review.htm, (7) add_contents.htm, (8) add_classification.htm, the (9) chapters parameter to the add_contents page in index.php (aka add_contents.htm), (10) the user parameter to contact.htm, or (11) the submit[string] parameter to search.htm. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE.  
Phase
Assigned (20050531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93562 12988 CVE-2005-1782 MISC:http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html  View
93563 12988 CVE-2005-1782 BID:13783  View
93564 12988 CVE-2005-1782 URL:http://www.securityfocus.com/bid/13783  View
93565 12988 CVE-2005-1782 OSVDB:16871  View
93566 12988 CVE-2005-1782 URL:http://www.osvdb.org/16871  View
93567 12988 CVE-2005-1782 OSVDB:16872  View
93568 12988 CVE-2005-1782 URL:http://www.osvdb.org/16872  View
93569 12988 CVE-2005-1782 OSVDB:16873  View
93570 12988 CVE-2005-1782 URL:http://www.osvdb.org/16873  View
93571 12988 CVE-2005-1782 OSVDB:16874  View
93572 12988 CVE-2005-1782 URL:http://www.osvdb.org/16874  View
93573 12988 CVE-2005-1782 OSVDB:16875  View
93574 12988 CVE-2005-1782 URL:http://www.osvdb.org/16875  View
93575 12988 CVE-2005-1782 OSVDB:16876  View
93576 12988 CVE-2005-1782 URL:http://www.osvdb.org/16876  View
93577 12988 CVE-2005-1782 OSVDB:16877  View
93578 12988 CVE-2005-1782 URL:http://www.osvdb.org/16877  View
93579 12988 CVE-2005-1782 OSVDB:16878  View
93580 12988 CVE-2005-1782 URL:http://www.osvdb.org/16878  View
93581 12988 CVE-2005-1782 OSVDB:16879  View
93582 12988 CVE-2005-1782 URL:http://www.osvdb.org/16879  View
93583 12988 CVE-2005-1782 SECTRACK:1014058  View

Related JVN