CVE

Id
21730  
CVE No.
CVE-2006-5626  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon parameter. NOTE: earlier downloads of 1.3.36 have the vulnerability; the software was updated without changing the version number.  
Phase
Assigned (20061031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208171 21730 CVE-2006-5626 BUGTRAQ:20061026 phpFaber CMS Cross Site Scripting  View
208172 21730 CVE-2006-5626 URL:http://www.securityfocus.com/archive/1/archive/1/449894/100/0/threaded  View
208173 21730 CVE-2006-5626 MISC:http://www.vigilon.com/advisories/vg-phpfaber-24-10-2006.txt  View
208174 21730 CVE-2006-5626 MISC:http://www.vigilon.com/resources/102506c.html  View
208175 21730 CVE-2006-5626 BID:20821  View
208176 21730 CVE-2006-5626 URL:http://www.securityfocus.com/bid/20821  View
208177 21730 CVE-2006-5626 VUPEN:ADV-2006-4260  View
208178 21730 CVE-2006-5626 URL:http://www.vupen.com/english/advisories/2006/4260  View
208179 21730 CVE-2006-5626 SECUNIA:22629  View
208180 21730 CVE-2006-5626 URL:http://secunia.com/advisories/22629  View
208181 21730 CVE-2006-5626 SREASON:1802  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61113 JVNDB-2006-003379 UNISOR CMS の login.asp における SQL インジェクションの脆弱性 UNISOR Content Management System (CMS) の login.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5628 21730 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003379.html  View