CVE

Id
20480  
CVE No.
CVE-2006-4376  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) profil_nr and (2) sprache parameters in the main portion of the portal, the (3) suchstring field in suchForm in the main portion of the portal, the (4) GaleryKey and (5) Breadcrumbs parameters in the gallerie module, and the (6) GGBNSaction parameter in the ggbns module.  
Phase
Assigned (20060825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
191965 20480 CVE-2006-4376 BUGTRAQ:20060820 Tons of SQL-injections and XSS in Eichhorn Portal and vendor page  View
191966 20480 CVE-2006-4376 URL:http://www.securityfocus.com/archive/1/archive/1/444065/100/0/threaded  View
191967 20480 CVE-2006-4376 SREASON:1458  View
191968 20480 CVE-2006-4376 URL:http://securityreason.com/securityalert/1458  View
191969 20480 CVE-2006-4376 XF:eichhorn-multiple-xss(28533)  View

Related JVN