CVE

Id
18452  
CVE No.
CVE-2006-2348  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection.  
Phase
Assigned (20060512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
160288 18452 CVE-2006-2348 BUGTRAQ:20060511 Several flaws in e-business designer (eBD)  View
160289 18452 CVE-2006-2348 URL:http://www.securityfocus.com/archive/1/archive/1/433807/100/0/threaded  View
160290 18452 CVE-2006-2348 FULLDISC:20060511 Several flaws in e-business designer (eBD)  View
160291 18452 CVE-2006-2348 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html  View
160292 18452 CVE-2006-2348 BID:17933  View
160293 18452 CVE-2006-2348 URL:http://www.securityfocus.com/bid/17933  View
160294 18452 CVE-2006-2348 VUPEN:ADV-2006-1784  View
160295 18452 CVE-2006-2348 URL:http://www.vupen.com/english/advisories/2006/1784  View
160296 18452 CVE-2006-2348 SECUNIA:20071  View
160297 18452 CVE-2006-2348 URL:http://secunia.com/advisories/20071  View
160298 18452 CVE-2006-2348 SREASON:891  View
160299 18452 CVE-2006-2348 URL:http://securityreason.com/securityalert/891  View
160300 18452 CVE-2006-2348 XF:ebd-formgrupo-xss(26475)  View

Related JVN