CVE

Id
25346  
CVE No.
CVE-2007-1989  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in DotClear before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post_id parameter to ecrire/trackback.php or the (2) tool_url parameter to tools/thememng/index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252713 25346 CVE-2007-1989 FULLDISC:20070412 Dotclear 1.* Cross Site Scripting Vulnerability  View
252714 25346 CVE-2007-1989 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053720.html  View
252715 25346 CVE-2007-1989 CONFIRM:http://www.dotclear.net/forum/viewtopic.php?id=26573  View
252716 25346 CVE-2007-1989 CONFIRM:http://www.dotclear.net/log/post/2007/04/10/Dotclear-126  View
252717 25346 CVE-2007-1989 BID:23411  View
252718 25346 CVE-2007-1989 URL:http://www.securityfocus.com/bid/23411  View
252719 25346 CVE-2007-1989 VUPEN:ADV-2007-1338  View
252720 25346 CVE-2007-1989 URL:http://www.vupen.com/english/advisories/2007/1338  View
252721 25346 CVE-2007-1989 SECUNIA:24829  View
252722 25346 CVE-2007-1989 URL:http://secunia.com/advisories/24829  View
252723 25346 CVE-2007-1989 XF:dotclear-tools-xss(33616)  View
252724 25346 CVE-2007-1989 URL:http://xforce.iss.net/xforce/xfdb/33616  View
252725 25346 CVE-2007-1989 XF:dotclear-trackback-xss(33615)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56705 JVNDB-2007-005397 CmailServer WebMail の mail/signup.asp におけるクロスサイトスクリプティングの脆弱性 CmailServer WebMail の mail/signup.asp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1991 25346 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005397.html  View