CVE

Id
14279  
CVE No.
CVE-2005-3073  
Status
Candidate  
Description
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.  
Phase
Assigned (20050927)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
106255 14279 CVE-2005-3073 MLIST:[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.  View
106256 14279 CVE-2005-3073 URL:http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html  View
106257 14279 CVE-2005-3073 MLIST:[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum  View
106258 14279 CVE-2005-3073 URL:http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html  View
106259 14279 CVE-2005-3073 BID:14931  View
106260 14279 CVE-2005-3073 URL:http://www.securityfocus.com/bid/14931  View
106261 14279 CVE-2005-3073 OSVDB:19653  View
106262 14279 CVE-2005-3073 URL:http://www.osvdb.org/19653  View
106263 14279 CVE-2005-3073 SECUNIA:16923  View
106264 14279 CVE-2005-3073 URL:http://secunia.com/advisories/16923  View
106265 14279 CVE-2005-3073 XF:interchange-submit-itl-injection(22387)  View

Related JVN