CVE

Id
16807  
CVE No.
CVE-2006-0703  
Status
Candidate  
Description
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter.  
Phase
Assigned (20060215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
136278 16807 CVE-2006-0703 BUGTRAQ:20060211 imageVue16.1 upload vulnerability  View
136279 16807 CVE-2006-0703 URL:http://www.securityfocus.com/archive/1/424745/30/0/threaded  View
136280 16807 CVE-2006-0703 BUGTRAQ:20060719 Re: imageVue16.1 upload vulnerability  View
136281 16807 CVE-2006-0703 URL:http://www.securityfocus.com/archive/1/archive/1/440586/100/100/threaded  View
136282 16807 CVE-2006-0703 BUGTRAQ:20061029 Re: imageVue16.1 upload vulnerability  View
136283 16807 CVE-2006-0703 URL:http://www.securityfocus.com/archive/1/archive/1/450047/100/100/threaded  View
136284 16807 CVE-2006-0703 BID:16594  View
136285 16807 CVE-2006-0703 URL:http://www.securityfocus.com/bid/16594  View
136286 16807 CVE-2006-0703 VUPEN:ADV-2006-0570  View
136287 16807 CVE-2006-0703 URL:http://www.vupen.com/english/advisories/2006/0570  View
136288 16807 CVE-2006-0703 SECUNIA:18802  View
136289 16807 CVE-2006-0703 URL:http://secunia.com/advisories/18802  View
136290 16807 CVE-2006-0703 SREASON:429  View
136291 16807 CVE-2006-0703 URL:http://securityreason.com/securityalert/429  View
136292 16807 CVE-2006-0703 XF:imagevue-index-sql-injection(24642)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57907 JVNDB-2006-000103 SSH 製品の SFTP サーバにおけるフォーマットストリングの脆弱性 複数の SSH 製品が実装する SFTP サーバのロギング機能には、ファイル名の処理においてフォーマットストリングの脆弱性が存在します。 CVE-2006-0705 16807 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000103.html  View