CVE

Id
18444  
CVE No.
CVE-2006-2340  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in the Hack Log.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
160207 18444 CVE-2006-2340 BUGTRAQ:20060506 PassMasterFlex (and PassMasterFlex+) XSS injection  View
160208 18444 CVE-2006-2340 URL:http://archives.neohapsis.com/archives/bugtraq/2006-05/0108.html  View
160209 18444 CVE-2006-2340 BID:17866  View
160210 18444 CVE-2006-2340 URL:http://www.securityfocus.com/bid/17866  View
160211 18444 CVE-2006-2340 VUPEN:ADV-2006-1696  View
160212 18444 CVE-2006-2340 URL:http://www.vupen.com/english/advisories/2006/1696  View
160213 18444 CVE-2006-2340 OSVDB:25302  View
160214 18444 CVE-2006-2340 URL:http://www.osvdb.org/25302  View
160215 18444 CVE-2006-2340 SECUNIA:20020  View
160216 18444 CVE-2006-2340 URL:http://secunia.com/advisories/20020  View
160217 18444 CVE-2006-2340 SREASON:879  View
160218 18444 CVE-2006-2340 URL:http://securityreason.com/securityalert/879  View
160219 18444 CVE-2006-2340 XF:pmf-useragent-header-xss(26298)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58048 JVNDB-2006-000244 IBM WebSphere Application Server のアクセスにおける認証回避の脆弱性 IBM WebSphere Application Server において、コンテキストルートを示す URL でアクセスした場合、認証を回避する事ができる脆弱性が存在します。 CVE-2006-2342 18444 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000244.html  View