CVE

Id
24330  
CVE No.
CVE-2007-0973  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action.  
Phase
Assigned (20070215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
239018 24330 CVE-2007-0973 BUGTRAQ:20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities  View
239019 24330 CVE-2007-0973 URL:http://www.securityfocus.com/archive/1/archive/1/460076/100/0/threaded  View
239020 24330 CVE-2007-0973 BUGTRAQ:20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities  View
239021 24330 CVE-2007-0973 URL:http://www.securityfocus.com/archive/1/archive/1/460100/100/0/threaded  View
239022 24330 CVE-2007-0973 MISC:http://mgsdl.free.fr/advisories/12070214.txt  View
239023 24330 CVE-2007-0973 MISC:http://www.acid-root.new.fr/advisories/12070214.txt  View
239024 24330 CVE-2007-0973 BID:22560  View
239025 24330 CVE-2007-0973 URL:http://www.securityfocus.com/bid/22560  View
239026 24330 CVE-2007-0973 OSVDB:33729  View
239027 24330 CVE-2007-0973 URL:http://osvdb.org/33729  View
239028 24330 CVE-2007-0973 XF:jupitercm-loggedguests-xss(32518)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52886 JVNDB-2007-001578 Ian Bezanson Apache Stats における重要な変数を上書きされる脆弱性 Ian Bezanson Apache Stats には、抽出関数が the _REQUEST superglobal 配列を使用する際、重要な変数を上書きされる脆弱性が存在します。 CVE-2007-0975 24330 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001578.html  View