CVE

Id
14679  
CVE No.
CVE-2005-3473  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blog_text parameters (involving the temp_subject variable) in (a) preview_cgi.php and (b) preview_static_cgi.php, or (4) scheme_name parameter and (5) bg_color parameters (involving the preset_name and result variables) in (c) colors.php.  
Phase
Assigned (20051102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
112143 14679 CVE-2005-3473 BUGTRAQ:20051102 Simple PHP Blog: Multiple XSS Vulnerabilities  View
112144 14679 CVE-2005-3473 URL:http://www.securityfocus.com/archive/1/archive/1/415463  View
112145 14679 CVE-2005-3473 MISC:http://www.seclab.tuwien.ac.at/advisories/TUVSA-0511-001.txt  View
112146 14679 CVE-2005-3473 BID:15283  View
112147 14679 CVE-2005-3473 URL:http://www.securityfocus.com/bid/15283  View
112148 14679 CVE-2005-3473 OSVDB:20436  View
112149 14679 CVE-2005-3473 URL:http://www.osvdb.org/20436  View
112150 14679 CVE-2005-3473 OSVDB:20437  View
112151 14679 CVE-2005-3473 URL:http://www.osvdb.org/20437  View
112152 14679 CVE-2005-3473 OSVDB:20438  View
112153 14679 CVE-2005-3473 URL:http://www.osvdb.org/20438  View
112154 14679 CVE-2005-3473 SECUNIA:17404  View
112155 14679 CVE-2005-3473 URL:http://secunia.com/advisories/17404  View
112156 14679 CVE-2005-3473 SREASON:138  View

Related JVN