CVE

Id
23024  
CVE No.
CVE-2006-6920  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php.  
Phase
Assigned (20070111)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222318 23024 CVE-2006-6920 CONFIRM:http://www.nucleuscms.org/item/3044  View
222319 23024 CVE-2006-6920 JVN:JVN#84656399  View
222320 23024 CVE-2006-6920 URL:http://jvn.jp/jp/JVN%2384656399/index.html  View
222321 23024 CVE-2006-6920 BID:21104  View
222322 23024 CVE-2006-6920 URL:http://www.securityfocus.com/bid/21104  View
222323 23024 CVE-2006-6920 VUPEN:ADV-2006-4495  View
222324 23024 CVE-2006-6920 URL:http://www.vupen.com/english/advisories/2006/4495  View
222325 23024 CVE-2006-6920 SECTRACK:1017220  View
222326 23024 CVE-2006-6920 URL:http://securitytracker.com/id?1017220  View
222327 23024 CVE-2006-6920 SECUNIA:22843  View
222328 23024 CVE-2006-6920 URL:http://secunia.com/advisories/22843  View
222329 23024 CVE-2006-6920 XF:nucleus-unspecified-xss(30254)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52538 JVNDB-2007-001230 phpdeadlock における SQL インジェクションの脆弱性 Deadlock User Management System (phpdeadlock) には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6922 23024 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001230.html  View