CVE

Id
28661  
CVE No.
CVE-2007-5304  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) repertimage parameter to utilisateurs/vousetesbannis.php, the (2) elseifvotetxtresultatduvote parameter to utilisateurs/votesresultats.php, and the (3) elseifforumtxtmenugeneraleduforum parameter to moduleajouter/depot/adminforum.php.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298674 28661 CVE-2007-5304 BUGTRAQ:20071006 Else If cms Multiple Remote vulnerabilities  View
298675 28661 CVE-2007-5304 URL:http://www.securityfocus.com/archive/1/archive/1/481683/100/0/threaded  View
298676 28661 CVE-2007-5304 BID:25951  View
298677 28661 CVE-2007-5304 URL:http://www.securityfocus.com/bid/25951  View
298678 28661 CVE-2007-5304 VUPEN:ADV-2007-3429  View
298679 28661 CVE-2007-5304 URL:http://www.vupen.com/english/advisories/2007/3429  View
298680 28661 CVE-2007-5304 OSVDB:38646  View
298681 28661 CVE-2007-5304 URL:http://osvdb.org/38646  View
298682 28661 CVE-2007-5304 OSVDB:38647  View
298683 28661 CVE-2007-5304 URL:http://osvdb.org/38647  View
298684 28661 CVE-2007-5304 OSVDB:38648  View
298685 28661 CVE-2007-5304 URL:http://osvdb.org/38648  View
298686 28661 CVE-2007-5304 SREASON:3204  View
298687 28661 CVE-2007-5304 URL:http://securityreason.com/securityalert/3204  View
298688 28661 CVE-2007-5304 XF:elseif-multiple-xss(37007)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57504 JVNDB-2007-006196 ELSEIF CMS における重要な情報を取得される脆弱性 ELSEIF CMS は、utilisateurs/votesresultats.php に関する処理に不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2007-5306 28661 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006196.html  View