CVE

Id
14702  
CVE No.
CVE-2005-3496  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg parameter to msg.php. NOTE: some sources identify a second vector in the login parameter to process_signup.php, but the original source says that it is for CRLF injection (CVE-2005-4712). Also note: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well. If so, followup investigation strongly suggests that the original report is correct.  
Phase
Assigned (20051103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
112352 14702 CVE-2005-3496 MISC:http://www.zone-h.org/advisories/read/id=8360  View
112353 14702 CVE-2005-3496 BID:15294  View
112354 14702 CVE-2005-3496 URL:http://www.securityfocus.com/bid/15294  View
112355 14702 CVE-2005-3496 VUPEN:ADV-2005-2292  View
112356 14702 CVE-2005-3496 URL:http://www.vupen.com/english/advisories/2005/2292  View
112357 14702 CVE-2005-3496 OSVDB:20479  View
112358 14702 CVE-2005-3496 URL:http://www.osvdb.org/20479  View
112359 14702 CVE-2005-3496 OSVDB:20480  View
112360 14702 CVE-2005-3496 URL:http://www.osvdb.org/20480  View
112361 14702 CVE-2005-3496 SECUNIA:17412  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62452 JVNDB-2005-000654 IBM WebSphere Application Server のトレースロギング機能における情報漏洩の脆弱性 IBM WebSphere Application Server には、URL をエンコードする際に、URL に含まれるクエリ文字列をトレースファイルに記録してしまう脆弱性が存在します。 CVE-2005-3498 14702 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000654.html  View