CVE

Id
18676  
CVE No.
CVE-2006-2572  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters.  
Phase
Assigned (20060524)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
163384 18676 CVE-2006-2572 BUGTRAQ:20060523 DGbook v1.0 - XSS  View
163385 18676 CVE-2006-2572 URL:http://www.securityfocus.com/archive/1/archive/1/434869/100/0/threaded  View
163386 18676 CVE-2006-2572 BUGTRAQ:20060609 Re: DGbook v1.0 - XSS  View
163387 18676 CVE-2006-2572 CONFIRM:http://www.securityfocus.com/archive/1/archive/1/436615/100/0/threaded  View
163388 18676 CVE-2006-2572 BID:18310  View
163389 18676 CVE-2006-2572 URL:http://www.securityfocus.com/bid/18310  View
163390 18676 CVE-2006-2572 VUPEN:ADV-2006-1942  View
163391 18676 CVE-2006-2572 URL:http://www.vupen.com/english/advisories/2006/1942  View
163392 18676 CVE-2006-2572 OSVDB:25732  View
163393 18676 CVE-2006-2572 URL:http://www.osvdb.org/25732  View
163394 18676 CVE-2006-2572 SECUNIA:20201  View
163395 18676 CVE-2006-2572 URL:http://secunia.com/advisories/20201  View
163396 18676 CVE-2006-2572 SREASON:948  View
163397 18676 CVE-2006-2572 URL:http://securityreason.com/securityalert/948  View
163398 18676 CVE-2006-2572 XF:dgbook-index-xss(26629)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58107 JVNDB-2006-000303 HP-UX の Software Distributor コマンドにおけるバッファオーバーフローおよびフォーマットストリングの脆弱性 HP-UX の Software Distributor で提供されている swpackage/swmodify/swcopy/swinstall/swask/swlist コマンドには、バッファオーバーフローおよびフォーマットストリングの脆弱性が存在します。 CVE-2006-2574 18676 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000303.html  View