CVE

Id
22551  
CVE No.
CVE-2006-6447  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the StrMes parameter in vf_info.asp and possibly (2) a URL in the SRC attribute of an IFRAME element that is submitted to vf_newtopic.asp.  
Phase
Assigned (20061210)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217723 22551 CVE-2006-6447 BUGTRAQ:20061203 Vt-Forum Lite System V.1.3 Xss Vuln.  View
217724 22551 CVE-2006-6447 URL:http://www.securityfocus.com/archive/1/archive/1/453452/100/0/threaded  View
217725 22551 CVE-2006-6447 BID:21428  View
217726 22551 CVE-2006-6447 URL:http://www.securityfocus.com/bid/21428  View
217727 22551 CVE-2006-6447 VUPEN:ADV-2006-4850  View
217728 22551 CVE-2006-6447 URL:http://www.vupen.com/english/advisories/2006/4850  View
217729 22551 CVE-2006-6447 SECUNIA:23226  View
217730 22551 CVE-2006-6447 URL:http://secunia.com/advisories/23226  View
217731 22551 CVE-2006-6447 SREASON:2011  View
217732 22551 CVE-2006-6447 URL:http://securityreason.com/securityalert/2011  View
217733 22551 CVE-2006-6447 XF:vtforum-multiple-xss(30725)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61326 JVNDB-2006-003592 Vt-Forum Lite におけるデータベースをダウンロードされる脆弱性 Vt-Forum Lite は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、データベースをダウンロードされる脆弱性が存在します。 CVE-2006-6449 22551 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003592.html  View