CVE

Id
19720  
CVE No.
CVE-2006-3616  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file.  
Phase
Assigned (20060714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178610 19720 CVE-2006-3616 BUGTRAQ:20060712 Lazarus Guestbook Cross Site Scripting Vulnerabilities  View
178611 19720 CVE-2006-3616 URL:http://www.securityfocus.com/archive/1/archive/1/439904/100/0/threaded  View
178612 19720 CVE-2006-3616 BID:18956  View
178613 19720 CVE-2006-3616 URL:http://www.securityfocus.com/bid/18956  View
178614 19720 CVE-2006-3616 VUPEN:ADV-2006-2784  View
178615 19720 CVE-2006-3616 URL:http://www.vupen.com/english/advisories/2006/2784  View
178616 19720 CVE-2006-3616 OSVDB:27089  View
178617 19720 CVE-2006-3616 URL:http://www.osvdb.org/27089  View
178618 19720 CVE-2006-3616 OSVDB:27090  View
178619 19720 CVE-2006-3616 URL:http://www.osvdb.org/27090  View
178620 19720 CVE-2006-3616 SECTRACK:1016486  View
178621 19720 CVE-2006-3616 URL:http://securitytracker.com/id?1016486  View
178622 19720 CVE-2006-3616 SECUNIA:21034  View
178623 19720 CVE-2006-3616 URL:http://secunia.com/advisories/21034  View
178624 19720 CVE-2006-3616 XF:lazarus-codesenglish-xss(27714)  View
178625 19720 CVE-2006-3616 URL:http://xforce.iss.net/xforce/xfdb/27714  View
178626 19720 CVE-2006-3616 XF:lazarus-picture-code-execute(27716)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60509 JVNDB-2006-002775 PBL Guestbook の pblguestbook.php における SQL インジェクションの脆弱性 Pixelated By Lev (PBL) Guestbook の pblguestbook.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-3618 19720 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002775.html  View