CVE

Id
28669  
CVE No.
CVE-2007-5312  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the (1) color parameter to pjirc/css.php and the (2) cat parameter to browse.php.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298776 28669 CVE-2007-5312 BUGTRAQ:20071008 TorrentTrader Classic Mutiple Remote vulnerabilities  View
298777 28669 CVE-2007-5312 URL:http://www.securityfocus.com/archive/1/archive/1/481749/100/0/threaded  View
298778 28669 CVE-2007-5312 MILW0RM:4500  View
298779 28669 CVE-2007-5312 URL:http://www.milw0rm.com/exploits/4500  View
298780 28669 CVE-2007-5312 BID:25962  View
298781 28669 CVE-2007-5312 URL:http://www.securityfocus.com/bid/25962  View
298782 28669 CVE-2007-5312 VUPEN:ADV-2007-3451  View
298783 28669 CVE-2007-5312 URL:http://www.vupen.com/english/advisories/2007/3451  View
298784 28669 CVE-2007-5312 OSVDB:37653  View
298785 28669 CVE-2007-5312 URL:http://osvdb.org/37653  View
298786 28669 CVE-2007-5312 OSVDB:37654  View
298787 28669 CVE-2007-5312 URL:http://osvdb.org/37654  View
298788 28669 CVE-2007-5312 SECUNIA:27109  View
298789 28669 CVE-2007-5312 URL:http://secunia.com/advisories/27109  View
298790 28669 CVE-2007-5312 SREASON:3207  View
298791 28669 CVE-2007-5312 URL:http://securityreason.com/securityalert/3207  View
298792 28669 CVE-2007-5312 XF:torrenttrader-css-browse-xss(37005)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57509 JVNDB-2007-006201 xKiosk WEB の system/funcs/xkurl.php における PHP リモートファイルインクルージョンの脆弱性 xKiosk WEB の system/funcs/xkurl.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5314 28669 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006201.html  View