CVE

Id
20987  
CVE No.
CVE-2006-4883  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
198937 20987 CVE-2006-4883 BUGTRAQ:20060916 BizDirectory all version xss  View
198938 20987 CVE-2006-4883 URL:http://www.securityfocus.com/archive/1/archive/1/446223/100/0/threaded  View
198939 20987 CVE-2006-4883 BID:20081  View
198940 20987 CVE-2006-4883 URL:http://www.securityfocus.com/bid/20081  View
198941 20987 CVE-2006-4883 VUPEN:ADV-2006-3691  View
198942 20987 CVE-2006-4883 URL:http://www.vupen.com/english/advisories/2006/3691  View
198943 20987 CVE-2006-4883 SECTRACK:1016876  View
198944 20987 CVE-2006-4883 URL:http://securitytracker.com/id?1016876  View
198945 20987 CVE-2006-4883 SECUNIA:21911  View
198946 20987 CVE-2006-4883 URL:http://secunia.com/advisories/21911  View
198947 20987 CVE-2006-4883 SREASON:1611  View
198948 20987 CVE-2006-4883 URL:http://securityreason.com/securityalert/1611  View
198949 20987 CVE-2006-4883 XF:bizdirectory-feed-xss(29002)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60924 JVNDB-2006-003190 Shadowed Portal における PHP リモートファイルインクルージョンの脆弱性 Shadowed Portal には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4885 20987 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003190.html  View