CVE

Id
24126  
CVE No.
CVE-2007-0769  
Status
Candidate  
Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly."  
Phase
Assigned (20070205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
235509 24126 CVE-2007-0769 BUGTRAQ:20070129 Phorum HTML Injection Vulnerability  View
235510 24126 CVE-2007-0769 URL:http://www.securityfocus.com/archive/1/archive/1/458461/100/0/threaded  View
235511 24126 CVE-2007-0769 BUGTRAQ:20070129 Re: Phorum HTML Injection Vulnerability  View
235512 24126 CVE-2007-0769 URL:http://www.securityfocus.com/archive/1/archive/1/458467/100/0/threaded  View
235513 24126 CVE-2007-0769 MISC:http://www.phorum.org/phorum5/read.php?12,119757  View
235514 24126 CVE-2007-0769 BID:22297  View
235515 24126 CVE-2007-0769 URL:http://www.securityfocus.com/bid/22297  View
235516 24126 CVE-2007-0769 VUPEN:ADV-2007-0410  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51661 JVNDB-2007-000324 Red Hat Enterprise Linux カーネルの utrace サポートに関するサービス運用妨害 (DoS) の脆弱性 Red Hat Enterprise Linux のカーネルには、utrace のサポートに関するカーネルがクラッシュする脆弱性が存在します。本脆弱性の詳細は不明です。 CVE-2007-0771 24126 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000324.html  View