CVE

Id
18188  
CVE No.
CVE-2006-2084  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in (a) index.php, and the (3) mod parameter in (b) admin.php.  
Phase
Assigned (20060428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156849 18188 CVE-2006-2084 BUGTRAQ:20060426 XXS Attack On FarsiNews  View
156850 18188 CVE-2006-2084 URL:http://www.securityfocus.com/archive/1/archive/1/432109/100/0/threaded  View
156851 18188 CVE-2006-2084 MISC:http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt  View
156852 18188 CVE-2006-2084 BID:17701  View
156853 18188 CVE-2006-2084 URL:http://www.securityfocus.com/bid/17701  View
156854 18188 CVE-2006-2084 SREASON:812  View
156855 18188 CVE-2006-2084 URL:http://securityreason.com/securityalert/812  View
156856 18188 CVE-2006-2084 XF:farsinews-index-admin-xss(26097)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61700 JVNDB-2006-003966 JuniperSetupDLL.dll におけるバッファオーバーフローの脆弱性 JuniperSetupDLL.dll には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-2086 18188 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003966.html  View