CVE

Id
25592  
CVE No.
CVE-2007-2235  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255695 25592 CVE-2007-2235 BUGTRAQ:20070411 PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)  View
255696 25592 CVE-2007-2235 URL:http://www.securityfocus.com/archive/1/archive/1/465400/100/100/threaded  View
255697 25592 CVE-2007-2235 BUGTRAQ:20070411 PunBB <= 1.2.14 Remote Code Execution (Exploit)  View
255698 25592 CVE-2007-2235 URL:http://www.securityfocus.com/archive/1/archive/1/465338/100/100/threaded  View
255699 25592 CVE-2007-2235 MISC:http://www.acid-root.new.fr/advisories/13070411.txt  View
255700 25592 CVE-2007-2235 CONFIRM:http://dev.punbb.org/changeset/934  View
255701 25592 CVE-2007-2235 CONFIRM:http://dev.punbb.org/changeset/938  View
255702 25592 CVE-2007-2235 VUPEN:ADV-2007-1362  View
255703 25592 CVE-2007-2235 URL:http://www.vupen.com/english/advisories/2007/1362  View
255704 25592 CVE-2007-2235 SECUNIA:24843  View
255705 25592 CVE-2007-2235 URL:http://secunia.com/advisories/24843  View
255706 25592 CVE-2007-2235 SREASON:2613  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55054 JVNDB-2007-003746 Microsoft Windows Graphics Device Interface におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Windows Graphics Device Interface (GDI+、GdiPlus.dll) には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-2237 25592 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003746.html  View