CVE

Id
21272  
CVE No.
CVE-2006-5168  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string.  
Phase
Assigned (20061004)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202289 21272 CVE-2006-5168 BUGTRAQ:20061002 Pebble 2.0.0 RC[1,2] XSS vulnerability  View
202290 21272 CVE-2006-5168 URL:http://www.securityfocus.com/archive/1/archive/1/447503/100/0/threaded  View
202291 21272 CVE-2006-5168 CONFIRM:http://svn.sourceforge.net/viewvc/pebble/trunk/src/net/sourceforge/pebble/search/SearchResults.java?r1=136&r2=206  View
202292 21272 CVE-2006-5168 BID:20298  View
202293 21272 CVE-2006-5168 URL:http://www.securityfocus.com/bid/20298  View
202294 21272 CVE-2006-5168 SREASON:1689  View
202295 21272 CVE-2006-5168 URL:http://securityreason.com/securityalert/1689  View
202296 21272 CVE-2006-5168 XF:pebble-search-xss(29312)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58561 JVNDB-2006-000757 pam_ldap の PasswordPolicyResponse 処理による認証回避の脆弱性 pam_ldap には、LDAP 認証において LDAP サーバより返される PasswordPolicyResponse コントロールメッセージの処理に不備が存在し、認証に失敗している場合においても pam_authenticate() 関数で成功コードが返されてしまう脆弱性が存在します。 CVE-2006-5170 21272 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000757.html  View