CVE

Id
29155  
CVE No.
CVE-2007-5798  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.  
Phase
Assigned (20071102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
305851 29155 CVE-2007-5798 AIXAPAR:PK50245  View
305852 29155 CVE-2007-5798 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245  View
305853 29155 CVE-2007-5798 BID:26276  View
305854 29155 CVE-2007-5798 URL:http://www.securityfocus.com/bid/26276  View
305855 29155 CVE-2007-5798 VUPEN:ADV-2007-3672  View
305856 29155 CVE-2007-5798 URL:http://www.vupen.com/english/advisories/2007/3672  View
305857 29155 CVE-2007-5798 OSVDB:41618  View
305858 29155 CVE-2007-5798 URL:http://osvdb.org/41618  View
305859 29155 CVE-2007-5798 SECTRACK:1018884  View
305860 29155 CVE-2007-5798 URL:http://www.securitytracker.com/id?1018884  View
305861 29155 CVE-2007-5798 SECUNIA:27448  View
305862 29155 CVE-2007-5798 URL:http://secunia.com/advisories/27448  View
305863 29155 CVE-2007-5798 XF:websphere-navigatetree-xss(38177)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57598 JVNDB-2007-006290 WordPress 用の BackUpWordPress プラグインにおける PHP リモートファイルインクルージョンの脆弱性 WordPress 用の BackUpWordPress プラグインには、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5800 29155 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006290.html  View