CVE

Id
15869  
CVE No.
CVE-2005-4665  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags.  
Phase
Assigned (20060119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
124741 15869 CVE-2005-4665 BUGTRAQ:20060116 PunBB BBCode URL Tag Script Injection Vulnerability  View
124742 15869 CVE-2005-4665 URL:http://www.securityfocus.com/archive/1/archive/1/422088/100/0/threaded  View
124743 15869 CVE-2005-4665 BUGTRAQ:20060117 Re: PunBB BBCode URL Tag Script Injection Vulnerability  View
124744 15869 CVE-2005-4665 URL:http://www.securityfocus.com/archive/1/422267/100/0/threaded  View
124745 15869 CVE-2005-4665 CONFIRM:http://punbb.org/changelogs/1.2.6_to_1.2.7.txt  View
124746 15869 CVE-2005-4665 CONFIRM:http://www.punbb.org/changelogs/1.2.6_to_1.2.7.txt  View
124747 15869 CVE-2005-4665 BID:14808  View
124748 15869 CVE-2005-4665 URL:http://www.securityfocus.com/bid/14808  View
124749 15869 CVE-2005-4665 VUPEN:ADV-2005-1708  View
124750 15869 CVE-2005-4665 URL:http://www.vupen.com/english/advisories/2005/1708  View
124751 15869 CVE-2005-4665 OSVDB:19382  View
124752 15869 CVE-2005-4665 URL:http://www.osvdb.org/19382  View
124753 15869 CVE-2005-4665 SECUNIA:16775  View
124754 15869 CVE-2005-4665 URL:http://secunia.com/advisories/16775  View
124755 15869 CVE-2005-4665 XF:punbb-bbcode-url-xss(22234)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62635 JVNDB-2005-000875 UnZip のコマンドライン引数のチェック不備によるバッファオーバーフローの脆弱性 Info-ZIP が提供する UnZip には、UnZip コマンドライン引数のチェックに不備が存在するため、過度に長いファイル名がコマンドラインで指定された場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-4667 15869 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000875.html  View