CVE

Id
24839  
CVE No.
CVE-2007-1482  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script or HTML via the e_id parameter in a viewentry cmd.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246077 24839 CVE-2007-1482 MILW0RM:3490  View
246078 24839 CVE-2007-1482 URL:http://www.milw0rm.com/exploits/3490  View
246079 24839 CVE-2007-1482 BID:22998  View
246080 24839 CVE-2007-1482 URL:http://www.securityfocus.com/bid/22998  View
246081 24839 CVE-2007-1482 VUPEN:ADV-2007-1001  View
246082 24839 CVE-2007-1482 URL:http://www.vupen.com/english/advisories/2007/1001  View
246083 24839 CVE-2007-1482 SECUNIA:24532  View
246084 24839 CVE-2007-1482 URL:http://secunia.com/advisories/24532  View
246085 24839 CVE-2007-1482 XF:wbblog-viewentry-xss(33011)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51677 JVNDB-2007-000340 PHP の array_user_key_compare() 関数におけるメモリ二重解放の脆弱性 PHP の array_user_key_compare() 関数には、zval_dtor の呼び出し処理の不備より、メモリの二重解放が発生する脆弱性が存在します。 CVE-2007-1484 24839 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000340.html  View