CVE

Id
17397  
CVE No.
CVE-2006-1293  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF).  
Phase
Assigned (20060319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143823 17397 CVE-2006-1293 BUGTRAQ:20060318 Contrexx CMS Xss Vuln  View
143824 17397 CVE-2006-1293 URL:http://www.securityfocus.com/archive/1/archive/1/428075/100/0/threaded  View
143825 17397 CVE-2006-1293 MISC:http://soot.shabgard.org/Contrexx-CMS.txt  View
143826 17397 CVE-2006-1293 MISC:http://www.contrexx.com/?section=media1&act=download&path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/&file=contrexx_v1.0.8_bugfix_27-02-06.zip  View
143827 17397 CVE-2006-1293 MISC:http://www.contrexx.com/?section=news&cmd=details&newsid=54  View
143828 17397 CVE-2006-1293 BID:17128  View
143829 17397 CVE-2006-1293 URL:http://www.securityfocus.com/bid/17128  View
143830 17397 CVE-2006-1293 VUPEN:ADV-2006-1013  View
143831 17397 CVE-2006-1293 URL:http://www.vupen.com/english/advisories/2006/1013  View
143832 17397 CVE-2006-1293 SECUNIA:19294  View
143833 17397 CVE-2006-1293 URL:http://secunia.com/advisories/19294  View
143834 17397 CVE-2006-1293 SREASON:599  View
143835 17397 CVE-2006-1293 URL:http://securityreason.com/securityalert/599  View
143836 17397 CVE-2006-1293 XF:contrexx-index-xss(25332)  View

Related JVN