CVE

Id
18944  
CVE No.
CVE-2006-2840  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.  
Phase
Assigned (20060605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
167506 18944 CVE-2006-2840 CONFIRM:http://www.pmwiki.org/wiki/PmWiki/ChangeLog  View
167507 18944 CVE-2006-2840 VUPEN:ADV-2006-2084  View
167508 18944 CVE-2006-2840 URL:http://www.vupen.com/english/advisories/2006/2084  View
167509 18944 CVE-2006-2840 SECUNIA:20386  View
167510 18944 CVE-2006-2840 URL:http://secunia.com/advisories/20386  View
167511 18944 CVE-2006-2840 XF:pmwiki-uploads-xss(26827)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58132 JVNDB-2006-000328 SquirrelMail の use_plugin() 関数におけるディレクトリトラバーサルの脆弱性 SquirrelMail の functions/plugin.php において、use_plugin() 関数の name パラメータにおける妥当性のチェックが不適切であるため、ディレクトリトラバーサル攻撃が可能な脆弱性が存在します。 CVE-2006-2842 18944 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000328.html  View