CVE

Id
19462  
CVE No.
CVE-2006-3358  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) cat_id, and (4) tim parameters, which are not sanitized before being returned in an error page. NOTE: it is possible that some of these vectors are resultant from an SQL injection issue.  
Phase
Assigned (20060706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
174767 19462 CVE-2006-3358 BUGTRAQ:20060629 NewsPHP 2006 PRO XSS SQL injection Vulnerability  View
174768 19462 CVE-2006-3358 URL:http://www.securityfocus.com/archive/1/archive/1/438858/100/0/threaded  View
174769 19462 CVE-2006-3358 BID:18726  View
174770 19462 CVE-2006-3358 URL:http://www.securityfocus.com/bid/18726  View
174771 19462 CVE-2006-3358 VUPEN:ADV-2006-2640  View
174772 19462 CVE-2006-3358 URL:http://www.vupen.com/english/advisories/2006/2640  View
174773 19462 CVE-2006-3358 OSVDB:26976  View
174774 19462 CVE-2006-3358 URL:http://www.osvdb.org/26976  View
174775 19462 CVE-2006-3358 OSVDB:26977  View
174776 19462 CVE-2006-3358 URL:http://www.osvdb.org/26977  View
174777 19462 CVE-2006-3358 SECUNIA:20943  View
174778 19462 CVE-2006-3358 URL:http://secunia.com/advisories/20943  View
174779 19462 CVE-2006-3358 SREASON:1188  View
174780 19462 CVE-2006-3358 URL:http://securityreason.com/securityalert/1188  View
174781 19462 CVE-2006-3358 XF:newsphp-multiple-parameters-xss(27508)  View

Related JVN