CVE

Id
21223  
CVE No.
CVE-2006-5119  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php, or the (3) admin_email parameter in (b) admin/password_forgotten.php.  
Phase
Assigned (20061002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
201757 21223 CVE-2006-5119 BUGTRAQ:20060928 Multiple XSS Vulnerabilities in Zen Cart 1.3.5  View
201758 21223 CVE-2006-5119 URL:http://www.securityfocus.com/archive/1/archive/1/447286/100/0/threaded  View
201759 21223 CVE-2006-5119 MISC:http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0003  View
201760 21223 CVE-2006-5119 CONFIRM:http://www.zen-cart.com/forum/showthread.php?p=270823#post270823  View
201761 21223 CVE-2006-5119 CONFIRM:http://www.zen-cart.com/forum/showthread.php?t=47526  View
201762 21223 CVE-2006-5119 BID:20242  View
201763 21223 CVE-2006-5119 URL:http://www.securityfocus.com/bid/20242  View
201764 21223 CVE-2006-5119 VUPEN:ADV-2006-3849  View
201765 21223 CVE-2006-5119 URL:http://www.vupen.com/english/advisories/2006/3849  View
201766 21223 CVE-2006-5119 SECUNIA:22118  View
201767 21223 CVE-2006-5119 URL:http://secunia.com/advisories/22118  View
201768 21223 CVE-2006-5119 SREASON:1667  View
201769 21223 CVE-2006-5119 URL:http://securityreason.com/securityalert/1667  View
201770 21223 CVE-2006-5119 XF:zencart-multiple-xss(29248)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60982 JVNDB-2006-003248 PostNuke の Admin セクションにおける SQL インジェクションの脆弱性 PostNuke の Admin セクションの modules/Downloads/admin.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5121 21223 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003248.html  View