CVE

Id
25368  
CVE No.
CVE-2007-2011  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in login.php in DeskPro 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  
Phase
Assigned (20070412)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252975 25368 CVE-2007-2011 BUGTRAQ:20070408 DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability  View
252976 25368 CVE-2007-2011 URL:http://www.securityfocus.com/archive/1/archive/1/465089/100/0/threaded  View
252977 25368 CVE-2007-2011 MISC:http://john-martinelli.com/work/deskpro.txt  View
252978 25368 CVE-2007-2011 BID:23381  View
252979 25368 CVE-2007-2011 URL:http://www.securityfocus.com/bid/23381  View
252980 25368 CVE-2007-2011 VUPEN:ADV-2007-1320  View
252981 25368 CVE-2007-2011 URL:http://www.vupen.com/english/advisories/2007/1320  View
252982 25368 CVE-2007-2011 OSVDB:34721  View
252983 25368 CVE-2007-2011 URL:http://osvdb.org/34721  View
252984 25368 CVE-2007-2011 SECUNIA:24844  View
252985 25368 CVE-2007-2011 URL:http://secunia.com/advisories/24844  View
252986 25368 CVE-2007-2011 SREASON:2556  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54995 JVNDB-2007-003687 JEx-Treme Einfacher Passworschutz の index.php におけるクロスサイトスクリプティングの脆弱性 JEx-Treme Einfacher Passworschutz の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2013 25368 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003687.html  View