CVE

Id
22257  
CVE No.
CVE-2006-6153  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215038 22257 CVE-2006-6153 BUGTRAQ:20061119 Classified System [injection sql]  View
215039 22257 CVE-2006-6153 URL:http://www.securityfocus.com/archive/1/archive/1/452179/100/100/threaded  View
215040 22257 CVE-2006-6153 MISC:http://s-a-p.ca/index.php?page=OurAdvisories&id=47  View
215041 22257 CVE-2006-6153 BID:21190  View
215042 22257 CVE-2006-6153 URL:http://www.securityfocus.com/bid/21190  View
215043 22257 CVE-2006-6153 SECTRACK:1017259  View
215044 22257 CVE-2006-6153 URL:http://securitytracker.com/id?1017259  View
215045 22257 CVE-2006-6153 SECUNIA:22987  View
215046 22257 CVE-2006-6153 URL:http://secunia.com/advisories/22987  View
215047 22257 CVE-2006-6153 SREASON:1926  View
215048 22257 CVE-2006-6153 URL:http://securityreason.com/securityalert/1926  View
215049 22257 CVE-2006-6153 XF:classifiedsystem-catsearch-xss(30446)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60199 JVNDB-2006-002465 HSRS の addrating.php における SQL インジェクションの脆弱性 HIOX Star Rating System Script (HSRS) の addrating.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6155 22257 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002465.html  View