CVE

Id
17648  
CVE No.
CVE-2006-1544  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147604 17648 CVE-2006-1544 BUGTRAQ:20060411 [eVuln] VNews Multiple Vulnerabilities  View
147605 17648 CVE-2006-1544 URL:http://www.securityfocus.com/archive/1/archive/1/430674/100/0/threaded  View
147606 17648 CVE-2006-1544 MISC:http://www.evuln.com/vulns/112  View
147607 17648 CVE-2006-1544 BID:17317  View
147608 17648 CVE-2006-1544 URL:http://www.securityfocus.com/bid/17317  View
147609 17648 CVE-2006-1544 VUPEN:ADV-2006-1173  View
147610 17648 CVE-2006-1544 URL:http://www.vupen.com/english/advisories/2006/1173  View
147611 17648 CVE-2006-1544 OSVDB:24275  View
147612 17648 CVE-2006-1544 URL:http://www.osvdb.org/24275  View
147613 17648 CVE-2006-1544 SECUNIA:19435  View
147614 17648 CVE-2006-1544 URL:http://secunia.com/advisories/19435  View
147615 17648 CVE-2006-1544 XF:vnews-news-xss(25530)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58419 JVNDB-2006-000615 Apache Struts において Validator による入力値検査が回避される脆弱性 The Apache Software Foundation により提供されている Web アプリケーションフレーム ワーク Apache Struts には、Validator による入力値検査が回避される脆弱性が存在します。 CVE-2006-1546 17648 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000615.html  View