CVE

Id
23532  
CVE No.
CVE-2007-0175  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes in the redirect_to parameter.  
Phase
Assigned (20070110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
227810 23532 CVE-2007-0175 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=410568  View
227811 23532 CVE-2007-0175 DEBIAN:DSA-1568  View
227812 23532 CVE-2007-0175 URL:http://www.debian.org/security/2008/dsa-1568  View
227813 23532 CVE-2007-0175 BID:21953  View
227814 23532 CVE-2007-0175 URL:http://www.securityfocus.com/bid/21953  View
227815 23532 CVE-2007-0175 OSVDB:32027  View
227816 23532 CVE-2007-0175 URL:http://osvdb.org/32027  View
227817 23532 CVE-2007-0175 SECUNIA:23656  View
227818 23532 CVE-2007-0175 URL:http://secunia.com/advisories/23656  View
227819 23532 CVE-2007-0175 SECUNIA:30093  View
227820 23532 CVE-2007-0175 URL:http://secunia.com/advisories/30093  View
227821 23532 CVE-2007-0175 XF:b2evolution-login-xss(31368)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54508 JVNDB-2007-003200 MediaWiki の AJAX モジュールにおけるクロスサイトスクリプティングの脆弱性 MediaWiki の AJAX モジュールには、wgUseAjax が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0177 23532 5.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003200.html  View