CVE

Id
25856  
CVE No.
CVE-2007-2499  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259508 25856 CVE-2007-2499 MISC:http://pridels0.blogspot.com/2007/05/dvddb-xss-vuln.html  View
259509 25856 CVE-2007-2499 BID:23764  View
259510 25856 CVE-2007-2499 URL:http://www.securityfocus.com/bid/23764  View
259511 25856 CVE-2007-2499 OSVDB:35544  View
259512 25856 CVE-2007-2499 URL:http://osvdb.org/35544  View
259513 25856 CVE-2007-2499 OSVDB:35545  View
259514 25856 CVE-2007-2499 URL:http://osvdb.org/35545  View
259515 25856 CVE-2007-2499 VUPEN:ADV-2007-1648  View
259516 25856 CVE-2007-2499 URL:http://www.vupen.com/english/advisories/2007/1648  View
259517 25856 CVE-2007-2499 SECUNIA:25127  View
259518 25856 CVE-2007-2499 URL:http://secunia.com/advisories/25127  View
259519 25856 CVE-2007-2499 XF:dvddb-loan-listmovies-xss(34017)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53281 JVNDB-2007-001973 CodePress の codepress.html における任意のコードを実行される脆弱性 CodePress の codepress.html には、任意のコードを実行される脆弱性が存在します。 CVE-2007-2501 25856 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001973.html  View