CVE

Id
22524  
CVE No.
CVE-2006-6420  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allow remote attackers to inject arbitrary web script or HTML via the (1) img, (2) title, (3) w, or (4) h parameter, different vectors than CVE-2006-6166. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20061209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217526 22524 CVE-2006-6420 BID:21496  View
217527 22524 CVE-2006-6420 URL:http://www.securityfocus.com/bid/21496  View
217528 22524 CVE-2006-6420 VUPEN:ADV-2006-4903  View
217529 22524 CVE-2006-6420 URL:http://www.vupen.com/english/advisories/2006/4903  View
217530 22524 CVE-2006-6420 SECUNIA:23160  View
217531 22524 CVE-2006-6420 URL:http://secunia.com/advisories/23160  View
217532 22524 CVE-2006-6420 XF:jceadmin-jce-xss(30799)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59451 JVNDB-2006-001717 Agileco AgileBill および AgileVoice におけるアプリケーションを無効にする脆弱性 Agileco AgileBill および AgileVoice は、特定のプロキシリクエストを適切に処理しないため、アプリケーションを無効にする脆弱性が存在します。 CVE-2006-6422 22524 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001717.html  View