CVE

Id
28168  
CVE No.
CVE-2007-4811  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via (1) the val parameter to alphabet.php in an alpha.albums action, or the PATH_INFO to (2) random.php or (3) admin/hidden.php.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292258 28168 CVE-2007-4811 BUGTRAQ:20070908 Netjuke 1.0-rc2 - sql injection & XSS  View
292259 28168 CVE-2007-4811 URL:http://www.securityfocus.com/archive/1/archive/1/478871/100/0/threaded  View
292260 28168 CVE-2007-4811 BID:25599  View
292261 28168 CVE-2007-4811 URL:http://www.securityfocus.com/bid/25599  View
292262 28168 CVE-2007-4811 OSVDB:38402  View
292263 28168 CVE-2007-4811 URL:http://osvdb.org/38402  View
292264 28168 CVE-2007-4811 OSVDB:38403  View
292265 28168 CVE-2007-4811 URL:http://osvdb.org/38403  View
292266 28168 CVE-2007-4811 OSVDB:38404  View
292267 28168 CVE-2007-4811 URL:http://osvdb.org/38404  View
292268 28168 CVE-2007-4811 SREASON:3110  View
292269 28168 CVE-2007-4811 URL:http://securityreason.com/securityalert/3110  View
292270 28168 CVE-2007-4811 XF:netjuke-alphabet-xss(36517)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53925 JVNDB-2007-002617 Domino Blogsphere におけるクロスサイトスクリプティングの脆弱性 Domino Blogsphere には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4813 28168 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002617.html  View