CVE

Id
20465  
CVE No.
CVE-2006-4361  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the (1) uname or (2) SEmail parameters.  
Phase
Assigned (20060825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
191808 20465 CVE-2006-4361 BUGTRAQ:20060821 Diesel Job Site forgot.php Cross-Site Scripting  View
191809 20465 CVE-2006-4361 URL:http://www.securityfocus.com/archive/1/archive/1/443926/100/0/threaded  View
191810 20465 CVE-2006-4361 VUPEN:ADV-2006-3345  View
191811 20465 CVE-2006-4361 URL:http://www.vupen.com/english/advisories/2006/3345  View
191812 20465 CVE-2006-4361 OSVDB:28073  View
191813 20465 CVE-2006-4361 URL:http://www.osvdb.org/28073  View
191814 20465 CVE-2006-4361 SECUNIA:21589  View
191815 20465 CVE-2006-4361 URL:http://secunia.com/advisories/21589  View
191816 20465 CVE-2006-4361 SREASON:1453  View
191817 20465 CVE-2006-4361 URL:http://securityreason.com/securityalert/1453  View
191818 20465 CVE-2006-4361 XF:jobsite-forgot-xss(28494)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58869 JVNDB-2006-001135 Mambo 用の CropImage コンポーネントの admin.cropcanvas.php における PHP リモートファイルインクルージョンの脆弱性 Mambo 用の CropImage コンポーネント (com_cropimage) の admin.cropcanvas.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4363 20465 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001135.html  View