CVE

Id
21757  
CVE No.
CVE-2006-5653  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers a new CVE was assigned.  
Phase
Assigned (20061102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208480 21757 CVE-2006-5653 BUGTRAQ:20061031 Sun java System Messenger Express XSS  View
208481 21757 CVE-2006-5653 URL:http://www.securityfocus.com/archive/1/archive/1/450153/100/0/threaded  View
208482 21757 CVE-2006-5653 BUGTRAQ:20070104 Re: Sun java System Messenger Express XSS  View
208483 21757 CVE-2006-5653 URL:http://www.securityfocus.com/archive/1/archive/1/456273/100/200/threaded  View
208484 21757 CVE-2006-5653 BID:20832  View
208485 21757 CVE-2006-5653 URL:http://www.securityfocus.com/bid/20832  View
208486 21757 CVE-2006-5653 VUPEN:ADV-2006-4281  View
208487 21757 CVE-2006-5653 URL:http://www.vupen.com/english/advisories/2006/4281  View
208488 21757 CVE-2006-5653 SECTRACK:1018106  View
208489 21757 CVE-2006-5653 URL:http://www.securitytracker.com/id?1018106  View
208490 21757 CVE-2006-5653 SECUNIA:22663  View
208491 21757 CVE-2006-5653 URL:http://secunia.com/advisories/22663  View
208492 21757 CVE-2006-5653 SREASON:1805  View
208493 21757 CVE-2006-5653 URL:http://securityreason.com/securityalert/1805  View
208494 21757 CVE-2006-5653 XF:sun-messaging-index-xss(29939)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60089 JVNDB-2006-002355 OpenDocMan の index.php における SQL インジェクションの脆弱性 OpenDocMan の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5655 21757 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002355.html  View