CVE

Id
19985  
CVE No.
CVE-2006-3881  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already covered by CVE-2006-1349; and the term parameter in a search action is already covered by CVE-2006-1806.  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184406 19985 CVE-2006-3881 BUGTRAQ:20060724 MusicBox <= 2.3.4 XSS SQL injection Vulnerability  View
184407 19985 CVE-2006-3881 URL:http://www.securityfocus.com/archive/1/archive/1/441000/100/0/threaded  View
184408 19985 CVE-2006-3881 SREASON:1284  View
184409 19985 CVE-2006-3881 URL:http://securityreason.com/securityalert/1284  View
184410 19985 CVE-2006-3881 XF:musicbox-multiple-xss(27925)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60655 JVNDB-2006-002921 Gonafish LinksCaffe におけるクロスサイトスクリプティングの脆弱性 Gonafish LinksCaffe には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3883 19985 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002921.html  View