CVE

Id
26606  
CVE No.
CVE-2007-3249  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter.  
Phase
Assigned (20070618)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270122 26606 CVE-2007-3249 FULLDISC:20070614 Letterman subscriber module XSS vulnerability  View
270123 26606 CVE-2007-3249 URL:http://marc.info/?l=full-disclosure&m=118184411720509&w=2  View
270124 26606 CVE-2007-3249 MISC:http://www.thejfactory.com/  View
270125 26606 CVE-2007-3249 BID:24479  View
270126 26606 CVE-2007-3249 URL:http://www.securityfocus.com/bid/24479  View
270127 26606 CVE-2007-3249 VUPEN:ADV-2007-2215  View
270128 26606 CVE-2007-3249 URL:http://www.vupen.com/english/advisories/2007/2215  View
270129 26606 CVE-2007-3249 OSVDB:36376  View
270130 26606 CVE-2007-3249 URL:http://osvdb.org/36376  View
270131 26606 CVE-2007-3249 SECUNIA:25670  View
270132 26606 CVE-2007-3249 URL:http://secunia.com/advisories/25670  View
270133 26606 CVE-2007-3249 XF:letterman-modlettermansubscribe-xss(34870)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53503 JVNDB-2007-002195 e-Vision CMS におけるディレクトリトラバーサルの脆弱性 e-Vision CMS には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-3251 26606 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002195.html  View