CVE

Id
21735  
CVE No.
CVE-2006-5631  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-5632.  
Phase
Assigned (20061031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208250 21735 CVE-2006-5631 VIM:20061031 Ig-shop change_pass.php XSS - 2 vectors  View
208251 21735 CVE-2006-5631 URL:http://www.attrition.org/pipermail/vim/2006-October/001099.html  View
208252 21735 CVE-2006-5631 SECTRACK:1017130  View
208253 21735 CVE-2006-5631 URL:http://securitytracker.com/id?1017130  View
208254 21735 CVE-2006-5631 SECUNIA:22701  View
208255 21735 CVE-2006-5631 URL:http://secunia.com/advisories/22701  View
208256 21735 CVE-2006-5631 XF:igshop-changepass-xss(29890)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60086 JVNDB-2006-002352 Firefox などにおけるサービス運用妨害 (DoS) の脆弱性 Firefox および Seamonkey には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2006-5633 21735 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002352.html  View