CVE

Id
26371  
CVE No.
CVE-2007-3014  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) errors/rights.asp or (2) errors/transaction.asp, or (3) the name of a MIME type (mimetype).  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267094 26371 CVE-2007-3014 BUGTRAQ:20070713 ActiveWeb Contentserver CMS Multiple Cross Site Scriptings  View
267095 26371 CVE-2007-3014 URL:http://www.securityfocus.com/archive/1/archive/1/473631/100/0/threaded  View
267096 26371 CVE-2007-3014 MISC:http://www.redteam-pentesting.de/advisories/rt-sa-2007-005.php  View
267097 26371 CVE-2007-3014 BID:24895  View
267098 26371 CVE-2007-3014 URL:http://www.securityfocus.com/bid/24895  View
267099 26371 CVE-2007-3014 BID:24896  View
267100 26371 CVE-2007-3014 URL:http://www.securityfocus.com/bid/24896  View
267101 26371 CVE-2007-3014 OSVDB:36259  View
267102 26371 CVE-2007-3014 URL:http://www.osvdb.org/36259  View
267103 26371 CVE-2007-3014 OSVDB:36260  View
267104 26371 CVE-2007-3014 URL:http://www.osvdb.org/36260  View
267105 26371 CVE-2007-3014 OSVDB:36261  View
267106 26371 CVE-2007-3014 URL:http://www.osvdb.org/36261  View
267107 26371 CVE-2007-3014 SECUNIA:26063  View
267108 26371 CVE-2007-3014 URL:http://secunia.com/advisories/26063  View
267109 26371 CVE-2007-3014 XF:activeweb-contentserver-msg-xss(35389)  View

Related JVN