CVE

Id
15658  
CVE No.
CVE-2005-4454  
Status
Candidate  
Description
Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a "" (backslash) within a "javascript" scheme in a style property (such as "javascript"), which bypasses the "javascript" check before the "" is stripped and then rendered in web browsers that allow scripting in style sheets.  
Phase
Assigned (20051221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
122806 15658 CVE-2005-4454 FULLDISC:20051220 LiveJournal CSS/JS injection vulnerability  View
122807 15658 CVE-2005-4454 URL:http://marc.info/?l=full-disclosure&m=113504421421972&w=2  View
122808 15658 CVE-2005-4454 FULLDISC:20051219 LiveJournal CSS/JS injection vulnerability  View
122809 15658 CVE-2005-4454 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html  View
122810 15658 CVE-2005-4454 CONFIRM:http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl  View
122811 15658 CVE-2005-4454 BID:15990  View
122812 15658 CVE-2005-4454 URL:http://www.securityfocus.com/bid/15990  View
122813 15658 CVE-2005-4454 OSVDB:21896  View
122814 15658 CVE-2005-4454 URL:http://www.osvdb.org/21896  View
122815 15658 CVE-2005-4454 SECUNIA:18157  View
122816 15658 CVE-2005-4454 URL:http://secunia.com/advisories/18157  View
122817 15658 CVE-2005-4454 XF:livejournal-javascript-xss(23839)  View

Related JVN