CVE

Id
18174  
CVE No.
CVE-2006-2070  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action.  
Phase
Assigned (20060426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156609 18174 CVE-2006-2070 BUGTRAQ:20060426 DevBB <= 1.0.0 XSS  View
156610 18174 CVE-2006-2070 URL:http://www.securityfocus.com/archive/1/archive/1/432096/100/0/threaded  View
156611 18174 CVE-2006-2070 MISC:http://downloads.securityfocus.com/vulnerabilities/exploits/DevBB-1.0.0-xss.txt  View
156612 18174 CVE-2006-2070 BID:17703  View
156613 18174 CVE-2006-2070 URL:http://www.securityfocus.com/bid/17703  View
156614 18174 CVE-2006-2070 VUPEN:ADV-2006-1544  View
156615 18174 CVE-2006-2070 URL:http://www.vupen.com/english/advisories/2006/1544  View
156616 18174 CVE-2006-2070 OSVDB:24994  View
156617 18174 CVE-2006-2070 URL:http://www.osvdb.org/24994  View
156618 18174 CVE-2006-2070 SECUNIA:19855  View
156619 18174 CVE-2006-2070 URL:http://secunia.com/advisories/19855  View
156620 18174 CVE-2006-2070 SREASON:800  View
156621 18174 CVE-2006-2070 URL:http://securityreason.com/securityalert/800  View
156622 18174 CVE-2006-2070 XF:devbb-member-xss(26091)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58046 JVNDB-2006-000242 DeleGate における不正な DNS パケットによるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2006-2072 18174 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000242.html  View