CVE

Id
28660  
CVE No.
CVE-2007-5303  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298667 28660 CVE-2007-5303 BUGTRAQ:20071008 new vuln in snewscms.net.ru in lang file  View
298668 28660 CVE-2007-5303 URL:http://www.securityfocus.com/archive/1/archive/1/481745/100/0/threaded  View
298669 28660 CVE-2007-5303 BID:25963  View
298670 28660 CVE-2007-5303 URL:http://www.securityfocus.com/bid/25963  View
298671 28660 CVE-2007-5303 OSVDB:38642  View
298672 28660 CVE-2007-5303 URL:http://osvdb.org/38642  View
298673 28660 CVE-2007-5303 XF:snewscms-newspage-xss(37014)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57503 JVNDB-2007-006195 ELSEIF CMS における PHP リモートファイルインクルージョンの脆弱性 ELSEIF CMS には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5305 28660 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006195.html  View