CVE

Id
19689  
CVE No.
CVE-2006-3585  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the (1) login parameter in admin/cms/index.php, (2) unspecified parameters in the "Supply news" page in formmail.php, (3) the URL in the "Site statistics" page, and the (5) query_string parameter when performing a search.  
Phase
Assigned (20060713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178185 19689 CVE-2006-3585 BUGTRAQ:20060802 Secunia Research: Jetbox Multiple Vulnerabilities  View
178186 19689 CVE-2006-3585 URL:http://www.securityfocus.com/archive/1/archive/1/441980/100/0/threaded  View
178187 19689 CVE-2006-3585 MISC:http://secunia.com/secunia_research/2006-57/advisory/  View
178188 19689 CVE-2006-3585 BID:19303  View
178189 19689 CVE-2006-3585 URL:http://www.securityfocus.com/bid/19303  View
178190 19689 CVE-2006-3585 OSVDB:27712  View
178191 19689 CVE-2006-3585 URL:http://www.osvdb.org/27712  View
178192 19689 CVE-2006-3585 OSVDB:27713  View
178193 19689 CVE-2006-3585 URL:http://www.osvdb.org/27713  View
178194 19689 CVE-2006-3585 OSVDB:27714  View
178195 19689 CVE-2006-3585 URL:http://www.osvdb.org/27714  View
178196 19689 CVE-2006-3585 SECUNIA:20889  View
178197 19689 CVE-2006-3585 URL:http://secunia.com/advisories/20889  View
178198 19689 CVE-2006-3585 SREASON:1339  View
178199 19689 CVE-2006-3585 URL:http://securityreason.com/securityalert/1339  View
178200 19689 CVE-2006-3585 XF:jetboxcms-index-xss(28164)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58348 JVNDB-2006-000544 Macromedia Flash Player の 不正な .swf ファイルの処理により任意のコマンドを実行される脆弱性 ------------ CVE-2006-3587 19689 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000544.html  View