CVE

Id
26600  
CVE No.
CVE-2007-3243  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the re parameter. NOTE: exploitation may require forcing the client to send a certain Referer header.  
Phase
Assigned (20070614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270058 26600 CVE-2007-3243 MISC:http://www.dragoslungu.com/2007/05/30/top-10-open-source-bulletin-boards-12-months-of-vulnerabilities/#comment-55  View
270059 26600 CVE-2007-3243 MISC:http://www.dragoslungu.com/2007/06/07/bbpress-xss-vulnerability/  View
270060 26600 CVE-2007-3243 BID:24422  View
270061 26600 CVE-2007-3243 URL:http://www.securityfocus.com/bid/24422  View
270062 26600 CVE-2007-3243 OSVDB:36818  View
270063 26600 CVE-2007-3243 URL:http://osvdb.org/36818  View
270064 26600 CVE-2007-3243 XF:bbpress-bblogin-xss(34947)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55316 JVNDB-2007-004008 IRC Services におけるゲストニックネームを持つユーザを切断される脆弱性 IRC Services には、ゲストニックネームを持つユーザを切断される脆弱性が存在します。 CVE-2007-3245 26600 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004008.html  View