CVE

Id
19956  
CVE No.
CVE-2006-3852  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment ("text") fields.  
Phase
Assigned (20060725)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184047 19956 CVE-2006-3852 BUGTRAQ:20060721 MicroGuestBook Remote XSS Attack  View
184048 19956 CVE-2006-3852 URL:http://www.securityfocus.com/archive/1/archive/1/440855/100/0/threaded  View
184049 19956 CVE-2006-3852 MISC:http://it.security.netsons.org/exploit/MicroGuestBook.txt  View
184050 19956 CVE-2006-3852 BID:19119  View
184051 19956 CVE-2006-3852 URL:http://www.securityfocus.com/bid/19119  View
184052 19956 CVE-2006-3852 VUPEN:ADV-2006-2935  View
184053 19956 CVE-2006-3852 URL:http://www.vupen.com/english/advisories/2006/2935  View
184054 19956 CVE-2006-3852 OSVDB:28677  View
184055 19956 CVE-2006-3852 URL:http://www.osvdb.org/28677  View
184056 19956 CVE-2006-3852 SECUNIA:21155  View
184057 19956 CVE-2006-3852 URL:http://secunia.com/advisories/21155  View
184058 19956 CVE-2006-3852 SREASON:1285  View
184059 19956 CVE-2006-3852 URL:http://securityreason.com/securityalert/1285  View
184060 19956 CVE-2006-3852 XF:micro-guestbook-add-xss(27911)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59622 JVNDB-2006-001888 IBM IDS におけるバッファオーバーフローの脆弱性 IBM Informix Dynamic Server (IDS) には、Windows 上で稼動している際、バッファオーバーフローの脆弱性が存在します。 CVE-2006-3854 19956 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001888.html  View