CVE

Id
23029  
CVE No.
CVE-2006-6925  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the message title field when submitting an article to articles/edit.php, (2) the message title field when submitting a blog post to blogs/post.php, or (3) the message description field when editing in the Sandbox in wiki/edit.php.  
Phase
Assigned (20070112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222372 23029 CVE-2006-6925 BUGTRAQ:20061106 bitweaver <=1.3.1 [injection sql (post) & xss (post)]  View
222373 23029 CVE-2006-6925 URL:http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html  View
222374 23029 CVE-2006-6925 BID:20988  View
222375 23029 CVE-2006-6925 URL:http://www.securityfocus.com/bid/20988  View
222376 23029 CVE-2006-6925 BID:20996  View
222377 23029 CVE-2006-6925 URL:http://www.securityfocus.com/bid/20996  View
222378 23029 CVE-2006-6925 VUPEN:ADV-2006-4485  View
222379 23029 CVE-2006-6925 URL:http://www.vupen.com/english/advisories/2006/4485  View
222380 23029 CVE-2006-6925 SECUNIA:22793  View
222381 23029 CVE-2006-6925 URL:http://secunia.com/advisories/22793  View
222382 23029 CVE-2006-6925 SREASON:2144  View
222383 23029 CVE-2006-6925 URL:http://securityreason.com/securityalert/2144  View
222384 23029 CVE-2006-6925 XF:bitweaver-edit-post-xss(30167)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52543 JVNDB-2007-001235 Rialto における SQL インジェクションの脆弱性 Rialto には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6927 23029 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001235.html  View