CVE

Id
21765  
CVE No.
CVE-2006-5661  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.  
Phase
Assigned (20061102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208552 21765 CVE-2006-5661 BUGTRAQ:20061101 Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"  View
208553 21765 CVE-2006-5661 URL:http://www.securityfocus.com/archive/1/archive/1/450270/100/0/threaded  View
208554 21765 CVE-2006-5661 BUGTRAQ:20061111 Re: Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"  View
208555 21765 CVE-2006-5661 URL:http://www.securityfocus.com/archive/1/archive/1/451350/100/100/threaded  View
208556 21765 CVE-2006-5661 FULLDISC:20061031 Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"  View
208557 21765 CVE-2006-5661 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050462.html  View
208558 21765 CVE-2006-5661 MISC:http://www.zion-security.com/text/XSS_Vulnerability_VIRtechs_Netquery.txt  View
208559 21765 CVE-2006-5661 CONFIRM:http://virtech.org/tools/  View
208560 21765 CVE-2006-5661 BID:20837  View
208561 21765 CVE-2006-5661 URL:http://www.securityfocus.com/bid/20837  View
208562 21765 CVE-2006-5661 VUPEN:ADV-2006-4512  View
208563 21765 CVE-2006-5661 URL:http://www.vupen.com/english/advisories/2006/4512  View
208564 21765 CVE-2006-5661 SECTRACK:1017147  View
208565 21765 CVE-2006-5661 URL:http://securitytracker.com/id?1017147  View
208566 21765 CVE-2006-5661 SECUNIA:22864  View
208567 21765 CVE-2006-5661 URL:http://secunia.com/advisories/22864  View
208568 21765 CVE-2006-5661 SREASON:1807  View
208569 21765 CVE-2006-5661 URL:http://securityreason.com/securityalert/1807  View
208570 21765 CVE-2006-5661 XF:netquery-nquser-xss(29927)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60091 JVNDB-2006-002357 IBM Informix Dynamic Serve などの製品における権限を取得される脆弱性 IBM Informix Dynamic Server、Informix Client Software Development Kit (CSDK)、および Informix I-Connect は、インストールスクリプトに対して安全でないパーミッションを使用するため、権限を取得される脆弱性が存在します。 CVE-2006-5663 21765 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002357.html  View