CVE

Id
26618  
CVE No.
CVE-2007-3261  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270339 26618 CVE-2007-3261 CONFIRM:http://dkret.svn.sourceforge.net/viewvc/dkret/trunk/widgets/widget_search.php?r1=275&r2=281  View
270340 26618 CVE-2007-3261 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=516770&group_id=185847  View
270341 26618 CVE-2007-3261 BID:24518  View
270342 26618 CVE-2007-3261 URL:http://www.securityfocus.com/bid/24518  View
270343 26618 CVE-2007-3261 VUPEN:ADV-2007-2243  View
270344 26618 CVE-2007-3261 URL:http://www.vupen.com/english/advisories/2007/2243  View
270345 26618 CVE-2007-3261 OSVDB:36373  View
270346 26618 CVE-2007-3261 URL:http://osvdb.org/36373  View
270347 26618 CVE-2007-3261 SECUNIA:25731  View
270348 26618 CVE-2007-3261 URL:http://secunia.com/advisories/25731  View
270349 26618 CVE-2007-3261 XF:dkret-widgetsearch-xss(34930)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51803 JVNDB-2007-000466 IBM WebSphere Application Server の Default Messaging コンポーネントにおける不適切な認証の問題 IBM WebSphere Application Server (WAS) の Default Messaging コンポーネントには、SDO レポジトリへのインタフェースで不適切な認証を行う問題が存在します。(PK43169) CVE-2007-3263 26618 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000466.html  View