CVE

Id
24597  
CVE No.
CVE-2007-1240  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the searchkey parameter to index.php, or the (2) sn or (3) ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20070303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242618 24597 CVE-2007-1240 MISC:http://downloads.securityfocus.com/vulnerabilities/exploits/22719.html  View
242619 24597 CVE-2007-1240 BID:22719  View
242620 24597 CVE-2007-1240 URL:http://www.securityfocus.com/bid/22719  View
242621 24597 CVE-2007-1240 OSVDB:35995  View
242622 24597 CVE-2007-1240 URL:http://osvdb.org/35995  View
242623 24597 CVE-2007-1240 OSVDB:35996  View
242624 24597 CVE-2007-1240 URL:http://osvdb.org/35996  View
242625 24597 CVE-2007-1240 XF:Docebocms-index-xss(32842)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52951 JVNDB-2007-001643 Audins Audiens の system/index.php における SQL インジェクションの脆弱性 Audins Audiens の system/index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1242 24597 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001643.html  View