CVE

Id
28653  
CVE No.
CVE-2007-5296  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the (1) db, (2) pagesize, (3) sort, (4) strKeyWords, and (5) table parameters. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298571 28653 CVE-2007-5296 MISC:http://pridels-team.blogspot.com/2007/10/dblist-xss-vuln.html  View
298572 28653 CVE-2007-5296 BID:25966  View
298573 28653 CVE-2007-5296 URL:http://www.securityfocus.com/bid/25966  View
298574 28653 CVE-2007-5296 VUPEN:ADV-2007-3426  View
298575 28653 CVE-2007-5296 URL:http://www.vupen.com/english/advisories/2007/3426  View
298576 28653 CVE-2007-5296 SECUNIA:27115  View
298577 28653 CVE-2007-5296 URL:http://secunia.com/advisories/27115  View
298578 28653 CVE-2007-5296 XF:dblist-multiple-xss(36984)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54060 JVNDB-2007-002752 CMS Creamotion における PHP リモートファイルインクルージョンの脆弱性 CMS Creamotion には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5298 28653 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002752.html  View