CVE

Id
26114  
CVE No.
CVE-2007-2757  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) wp-content/themes/redoable/searchloop.php or (2) wp-content/themes/redoable/header.php.  
Phase
Assigned (20070518)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262899 26114 CVE-2007-2757 BUGTRAQ:20070517 RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included)  View
262900 26114 CVE-2007-2757 URL:http://www.securityfocus.com/archive/1/archive/1/468892/100/0/threaded  View
262901 26114 CVE-2007-2757 MISC:http://redlevel.org/wp-content/uploads/redoable.txt  View
262902 26114 CVE-2007-2757 BID:24037  View
262903 26114 CVE-2007-2757 URL:http://www.securityfocus.com/bid/24037  View
262904 26114 CVE-2007-2757 OSVDB:37040  View
262905 26114 CVE-2007-2757 URL:http://osvdb.org/37040  View
262906 26114 CVE-2007-2757 OSVDB:37041  View
262907 26114 CVE-2007-2757 URL:http://osvdb.org/37041  View
262908 26114 CVE-2007-2757 SECUNIA:25310  View
262909 26114 CVE-2007-2757 URL:http://secunia.com/advisories/25310  View
262910 26114 CVE-2007-2757 SREASON:2721  View
262911 26114 CVE-2007-2757 URL:http://securityreason.com/securityalert/2721  View
262912 26114 CVE-2007-2757 XF:redoable-header-searchloop-xss(34363)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53350 JVNDB-2007-002042 Adempiere の insert 関数における SQL インジェクションの脆弱性 Adempiere の ValuePreference クラス (grid/ed/ValuePreference.java) の insert 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2759 26114 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002042.html  View