CVE

Id
20732  
CVE No.
CVE-2006-4628  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195909 20732 CVE-2006-4628 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=445066  View
195910 20732 CVE-2006-4628 BID:19871  View
195911 20732 CVE-2006-4628 URL:http://www.securityfocus.com/bid/19871  View
195912 20732 CVE-2006-4628 VUPEN:ADV-2006-3481  View
195913 20732 CVE-2006-4628 URL:http://www.vupen.com/english/advisories/2006/3481  View
195914 20732 CVE-2006-4628 SECUNIA:21781  View
195915 20732 CVE-2006-4628 URL:http://secunia.com/advisories/21781  View
195916 20732 CVE-2006-4628 XF:vcddb-comment-xss(28764)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60858 JVNDB-2006-003124 Sky GUNNING MySpeach の jscript.php における PHP リモートファイルインクルージョンの脆弱性 Sky GUNNING MySpeach の jscript.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4630 20732 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003124.html  View