CVE

Id
21736  
CVE No.
CVE-2006-5632  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20061031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208257 21736 CVE-2006-5632 VIM:20061031 Ig-shop change_pass.php XSS - 2 vectors  View
208258 21736 CVE-2006-5632 URL:http://www.attrition.org/pipermail/vim/2006-October/001099.html  View
208259 21736 CVE-2006-5632 BID:20768  View
208260 21736 CVE-2006-5632 URL:http://www.securityfocus.com/bid/20768  View
208261 21736 CVE-2006-5632 SECTRACK:1017130  View
208262 21736 CVE-2006-5632 URL:http://securitytracker.com/id?1017130  View
208263 21736 CVE-2006-5632 SECUNIA:22701  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61114 JVNDB-2006-003380 phpProfiles における PHP リモートファイルインクルージョンの脆弱性 phpProfiles には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5634 21736 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003380.html  View