CVE

Id
19713  
CVE No.
CVE-2006-3609  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject arbitrary web script or HTML via the page_name parameter with an IMG tag containing a javascript URI in the SRC attribute.  
Phase
Assigned (20060714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178568 19713 CVE-2006-3609 BUGTRAQ:20060713 Orbitmatrix PHP Script v1.0  View
178569 19713 CVE-2006-3609 URL:http://www.securityfocus.com/archive/1/archive/1/439970/100/0/threaded  View
178570 19713 CVE-2006-3609 VUPEN:ADV-2006-2808  View
178571 19713 CVE-2006-3609 URL:http://www.vupen.com/english/advisories/2006/2808  View
178572 19713 CVE-2006-3609 SECTRACK:1016490  View
178573 19713 CVE-2006-3609 URL:http://securitytracker.com/id?1016490  View
178574 19713 CVE-2006-3609 SECUNIA:21052  View
178575 19713 CVE-2006-3609 URL:http://secunia.com/advisories/21052  View
178576 19713 CVE-2006-3609 XF:orbitmatrix-index-xss(27718)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60502 JVNDB-2006-002768 Phorum の pm.php におけるディレクトリトラバーサルの脆弱性 Phorum の pm.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-3611 19713 5.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002768.html  View