CVE

Id
21248  
CVE No.
CVE-2006-5144  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.  
Phase
Assigned (20061002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202008 21248 CVE-2006-5144 BUGTRAQ:20060930 OlateDownload 3.4.0 Multiple Vulnerabilities  View
202009 21248 CVE-2006-5144 URL:http://www.securityfocus.com/archive/1/archive/1/447424/100/0/threaded  View
202010 21248 CVE-2006-5144 BID:20278  View
202011 21248 CVE-2006-5144 URL:http://www.securityfocus.com/bid/20278  View
202012 21248 CVE-2006-5144 SECUNIA:22241  View
202013 21248 CVE-2006-5144 URL:http://secunia.com/advisories/22241  View
202014 21248 CVE-2006-5144 SREASON:1680  View
202015 21248 CVE-2006-5144 URL:http://securityreason.com/securityalert/1680  View
202016 21248 CVE-2006-5144 XF:olate-download-userupload-xss(29292)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60993 JVNDB-2006-003259 Yblog におけるクロスサイトスクリプティングの脆弱性 Yblog には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5146 21248 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003259.html  View