CVE

Id
13694  
CVE No.
CVE-2005-2488  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.  
Phase
Assigned (20050807)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
99730 13694 CVE-2005-2488 MISC:http://www.rgod.altervista.org/webc.html  View
99731 13694 CVE-2005-2488 BID:14464  View
99732 13694 CVE-2005-2488 URL:http://www.securityfocus.com/bid/14464  View
99733 13694 CVE-2005-2488 SECTRACK:1014616  View
99734 13694 CVE-2005-2488 URL:http://securitytracker.com/id?1014616  View
99735 13694 CVE-2005-2488 SECUNIA:16317  View
99736 13694 CVE-2005-2488 URL:http://secunia.com/advisories/16317  View
99737 13694 CVE-2005-2488 XF:webcms-multiple-script-xss(21689)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62294 JVNDB-2005-000496 Linux Kernel の sendmsg() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2005-2490 13694 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000496.html  View