CVE

Id
25080  
CVE No.
CVE-2007-1723  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do.  
Phase
Assigned (20070327)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249553 25080 CVE-2007-1723 BUGTRAQ:20070326 Multiple XSS in IronMail  View
249554 25080 CVE-2007-1723 URL:http://www.securityfocus.com/archive/1/archive/1/463827/100/0/threaded  View
249555 25080 CVE-2007-1723 MISC:http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html  View
249556 25080 CVE-2007-1723 VUPEN:ADV-2007-1164  View
249557 25080 CVE-2007-1723 URL:http://www.vupen.com/english/advisories/2007/1164  View
249558 25080 CVE-2007-1723 OSVDB:34526  View
249559 25080 CVE-2007-1723 URL:http://osvdb.org/34526  View
249560 25080 CVE-2007-1723 OSVDB:34527  View
249561 25080 CVE-2007-1723 URL:http://osvdb.org/34527  View
249562 25080 CVE-2007-1723 OSVDB:34528  View
249563 25080 CVE-2007-1723 URL:http://osvdb.org/34528  View
249564 25080 CVE-2007-1723 OSVDB:34529  View
249565 25080 CVE-2007-1723 URL:http://osvdb.org/34529  View
249566 25080 CVE-2007-1723 OSVDB:34530  View
249567 25080 CVE-2007-1723 URL:http://osvdb.org/34530  View
249568 25080 CVE-2007-1723 OSVDB:34531  View
249569 25080 CVE-2007-1723 URL:http://osvdb.org/34531  View
249570 25080 CVE-2007-1723 OSVDB:34532  View
249571 25080 CVE-2007-1723 URL:http://osvdb.org/34532  View
249572 25080 CVE-2007-1723 OSVDB:34533  View
249573 25080 CVE-2007-1723 URL:http://osvdb.org/34533  View
249574 25080 CVE-2007-1723 SECTRACK:1017821  View
249575 25080 CVE-2007-1723 URL:http://www.securitytracker.com/id?1017821  View
249576 25080 CVE-2007-1723 SECUNIA:24657  View
249577 25080 CVE-2007-1723 URL:http://secunia.com/advisories/24657  View
249578 25080 CVE-2007-1723 SREASON:2484  View
249579 25080 CVE-2007-1723 URL:http://securityreason.com/securityalert/2484  View
249580 25080 CVE-2007-1723 XF:ironmail-multiple-xss(33232)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54905 JVNDB-2007-003597 IceBB の index.php における SQL インジェクションの脆弱性 IceBB の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1725 25080 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003597.html  View