CVE

Id
19183  
CVE No.
CVE-2006-3079  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.cfm in SSPwiz Plus 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171035 19183 CVE-2006-3079 MISC:http://pridels0.blogspot.com/2006/06/sspwiz-xss-vuln.html  View
171036 19183 CVE-2006-3079 BID:18482  View
171037 19183 CVE-2006-3079 URL:http://www.securityfocus.com/bid/18482  View
171038 19183 CVE-2006-3079 OSVDB:26532  View
171039 19183 CVE-2006-3079 URL:http://www.osvdb.org/26532  View
171040 19183 CVE-2006-3079 SECUNIA:20698  View
171041 19183 CVE-2006-3079 URL:http://secunia.com/advisories/20698  View
171042 19183 CVE-2006-3079 XF:sspwiz-index-xss(27149)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58153 JVNDB-2006-000349 MySQL の str_to_date() 関数におけるサービス運用妨害 (DoS) の脆弱性 MySQL の str_to_date() 関数において、第 2 引数 (フォーマット指定子) に NULL が渡された際に、mysqld がサービス運用妨害 （DoS) 状態となる脆弱性が存在します。 CVE-2006-3081 19183 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000349.html  View