CVE

Id
23032  
CVE No.
CVE-2006-6928  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) listmain.asp or (b) searchmain.asp, the (2) the Keyword parameter to (c) searchkey.asp, or the (3) refno parameter to (d) forminfo.asp.  
Phase
Assigned (20070112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222399 23032 CVE-2006-6928 BUGTRAQ:20061120 Rialto 1.6[admin login bypass & multiples injections sql]  View
222400 23032 CVE-2006-6928 URL:http://www.securityfocus.com/archive/1/archive/1/452112/100/0/threaded  View
222401 23032 CVE-2006-6928 BID:21191  View
222402 23032 CVE-2006-6928 URL:http://www.securityfocus.com/bid/21191  View
222403 23032 CVE-2006-6928 VUPEN:ADV-2006-4630  View
222404 23032 CVE-2006-6928 URL:http://www.vupen.com/english/advisories/2006/4630  View
222405 23032 CVE-2006-6928 SECUNIA:23049  View
222406 23032 CVE-2006-6928 URL:http://secunia.com/advisories/23049  View
222407 23032 CVE-2006-6928 SREASON:2143  View
222408 23032 CVE-2006-6928 URL:http://securityreason.com/securityalert/2143  View
222409 23032 CVE-2006-6928 XF:rialto-multiple-scripts-xss(30425)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52546 JVNDB-2007-001238 Rapid Classified の viewad.asp における SQL インジェクションの脆弱性 Rapid Classified の viewad.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6930 23032 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001238.html  View