CVE

Id
21250  
CVE No.
CVE-2006-5146  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php.  
Phase
Assigned (20061002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202026 21250 CVE-2006-5146 BUGTRAQ:20060930 Yblog => Cross Site Scripting  View
202027 21250 CVE-2006-5146 URL:http://www.securityfocus.com/archive/1/archive/1/447427/100/0/threaded  View
202028 21250 CVE-2006-5146 VIM:20061002 yblog: distributable product  View
202029 21250 CVE-2006-5146 URL:http://www.attrition.org/pipermail/vim/2006-October/001065.html  View
202030 21250 CVE-2006-5146 BID:20280  View
202031 21250 CVE-2006-5146 URL:http://www.securityfocus.com/bid/20280  View
202032 21250 CVE-2006-5146 SREASON:1679  View
202033 21250 CVE-2006-5146 URL:http://securityreason.com/securityalert/1679  View
202034 21250 CVE-2006-5146 XF:yblog-multiple-xss(29291)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59083 JVNDB-2006-001349 Forum82 における PHP リモートファイルインクルージョンの脆弱性 Forum82 には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5148 21250 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001349.html  View