CVE

Id
21256  
CVE No.
CVE-2006-5152  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.  
Phase
Assigned (20061003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202087 21256 CVE-2006-5152 BUGTRAQ:20061002 IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053])  View
202088 21256 CVE-2006-5152 URL:http://www.securityfocus.com/archive/1/archive/1/447509/100/0/threaded  View
202089 21256 CVE-2006-5152 BUGTRAQ:20061002 Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053])  View
202090 21256 CVE-2006-5152 URL:http://www.securityfocus.com/archive/1/447516/100/0/threaded  View
202091 21256 CVE-2006-5152 BUGTRAQ:20061002 Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053])  View
202092 21256 CVE-2006-5152 URL:http://www.securityfocus.com/archive/1/447574/100/0/threaded  View
202093 21256 CVE-2006-5152 FULLDISC:20061002 IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053])  View
202094 21256 CVE-2006-5152 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0017.html  View
202095 21256 CVE-2006-5152 FULLDISC:20061002 Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053])  View
202096 21256 CVE-2006-5152 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0030.html  View
202097 21256 CVE-2006-5152 OSVDB:31328  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59084 JVNDB-2006-001350 DeluxeBB の cp/sig.php における PHP リモートファイルインクルージョンの脆弱性 DeluxeBB の cp/sig.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5154 21256 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001350.html  View