CVE

Id
28416  
CVE No.
CVE-2007-5059  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form, and (3) an unspecified "url value," leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel.  
Phase
Assigned (20070924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295304 28416 CVE-2007-5059 BUGTRAQ:20070921 greensql firewall permanent xss  View
295305 28416 CVE-2007-5059 URL:http://www.securityfocus.com/archive/1/archive/1/480278/100/0/threaded  View
295306 28416 CVE-2007-5059 CONFIRM:http://www.greensql.net/security  View
295307 28416 CVE-2007-5059 BID:25767  View
295308 28416 CVE-2007-5059 URL:http://www.securityfocus.com/bid/25767  View
295309 28416 CVE-2007-5059 OSVDB:38165  View
295310 28416 CVE-2007-5059 URL:http://www.osvdb.org/38165  View
295311 28416 CVE-2007-5059 OSVDB:38166  View
295312 28416 CVE-2007-5059 URL:http://www.osvdb.org/38166  View
295313 28416 CVE-2007-5059 XF:greensql-adminpanel-xss(36749)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53987 JVNDB-2007-002679 Clansphere の mods/banners/navlist.php における SQL インジェクションの脆弱性 Clansphere の mods/banners/navlist.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-5061 28416 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002679.html  View