CVE

Id
18170  
CVE No.
CVE-2006-2066  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.  
Phase
Assigned (20060426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156561 18170 CVE-2006-2066 BUGTRAQ:20060421 vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability.  View
156562 18170 CVE-2006-2066 URL:http://www.securityfocus.com/archive/1/archive/1/431759/100/0/threaded  View
156563 18170 CVE-2006-2066 BUGTRAQ:20060927 MkPortal Cross Site Scripting (All versions) xSS  View
156564 18170 CVE-2006-2066 URL:http://www.securityfocus.com/archive/1/archive/1/447195/100/0/threaded  View
156565 18170 CVE-2006-2066 BUGTRAQ:20060928 Re: xxs in MKPortal M1.1  View
156566 18170 CVE-2006-2066 URL:http://www.securityfocus.com/archive/1/archive/1/447303/100/0/threaded  View
156567 18170 CVE-2006-2066 MISC:http://www.nukedx.com/?viewdoc=26  View
156568 18170 CVE-2006-2066 BID:17651  View
156569 18170 CVE-2006-2066 URL:http://www.securityfocus.com/bid/17651  View
156570 18170 CVE-2006-2066 BID:20232  View
156571 18170 CVE-2006-2066 URL:http://www.securityfocus.com/bid/20232  View
156572 18170 CVE-2006-2066 VUPEN:ADV-2006-1485  View
156573 18170 CVE-2006-2066 URL:http://www.vupen.com/english/advisories/2006/1485  View
156574 18170 CVE-2006-2066 OSVDB:24901  View
156575 18170 CVE-2006-2066 URL:http://www.osvdb.org/24901  View
156576 18170 CVE-2006-2066 SECTRACK:1015977  View
156577 18170 CVE-2006-2066 URL:http://securitytracker.com/id?1015977  View
156578 18170 CVE-2006-2066 SECUNIA:19786  View
156579 18170 CVE-2006-2066 URL:http://secunia.com/advisories/19786  View
156580 18170 CVE-2006-2066 SREASON:801  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58717 JVNDB-2006-000983 JP1 製品におけるサービス運用妨害 (DoS) の脆弱性 日立 JP1 製品には、リクエストやデータの処理に不備があるために、意図しない処理によりサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-2068 18170 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000983.html  View