CVE

Id
21140  
CVE No.
CVE-2006-5036  
Status
Candidate  
Description
** DISPUTED ** MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server"s IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability."  
Phase
Assigned (20060927)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
200761 21140 CVE-2006-5036 BUGTRAQ:20060922 Squiz MySource Matrix Unauthorised Proxy and Cross Site Scripting  View
200762 21140 CVE-2006-5036 URL:http://www.securityfocus.com/archive/1/archive/1/446722/100/0/threaded  View
200763 21140 CVE-2006-5036 MISC:http://www.aushack.com/advisories/200607-mysourcematrix.txt  View
200764 21140 CVE-2006-5036 SECUNIA:22060  View
200765 21140 CVE-2006-5036 URL:http://secunia.com/advisories/22060  View
200766 21140 CVE-2006-5036 SREASON:1635  View
200767 21140 CVE-2006-5036 URL:http://securityreason.com/securityalert/1635  View
200768 21140 CVE-2006-5036 XF:mysource-sqremotepageurl-xss(29112)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59056 JVNDB-2006-001322 FiWin SS28S WiFi VoIP SIP/Skype Phone における管理者のアクセス権を取得される脆弱性 FiWin SS28S WiFi VoIP SIP/Skype Phone は、ハードコーディングされたユーザ名およびパスワードを持つため、管理者のアクセス権を取得される脆弱性が存在します。 CVE-2006-5038 21140 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001322.html  View