CVE

Id
19207  
CVE No.
CVE-2006-3103  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter in articles/index.php.  
Phase
Assigned (20060620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171526 19207 CVE-2006-3103 BUGTRAQ:20060617 bitweaver <= v1.3 multiple vulnerabilities  View
171527 19207 CVE-2006-3103 URL:http://www.securityfocus.com/archive/1/archive/1/437491/100/0/threaded  View
171528 19207 CVE-2006-3103 MISC:http://retrogod.altervista.org/bitweaver_13_xpl.html  View
171529 19207 CVE-2006-3103 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358  View
171530 19207 CVE-2006-3103 CONFIRM:http://www.bitweaver.org/articles/45  View
171531 19207 CVE-2006-3103 VUPEN:ADV-2006-2405  View
171532 19207 CVE-2006-3103 URL:http://www.vupen.com/english/advisories/2006/2405  View
171533 19207 CVE-2006-3103 OSVDB:26588  View
171534 19207 CVE-2006-3103 URL:http://www.osvdb.org/26588  View
171535 19207 CVE-2006-3103 SECUNIA:20695  View
171536 19207 CVE-2006-3103 URL:http://secunia.com/advisories/20695  View
171537 19207 CVE-2006-3103 SREASON:1115  View
171538 19207 CVE-2006-3103 URL:http://securityreason.com/securityalert/1115  View
171539 19207 CVE-2006-3103 XF:bitweaver-index-xss(27213)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61765 JVNDB-2006-004031 Bitweaver における CRLF インジェクションの脆弱性 Bitweaver 1.3 には、CRLF インジェクションの脆弱性が存在します。 CVE-2006-3105 19207 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-004031.html  View