CVE

Id
29442  
CVE No.
CVE-2007-6085  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.  
Phase
Assigned (20071121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
309599 29442 CVE-2007-6085 BUGTRAQ:20071118 VigileCMS 1.4 Multiple Remote Vulnerabilities  View
309600 29442 CVE-2007-6085 URL:http://www.securityfocus.com/archive/1/archive/1/483907/100/0/threaded  View
309601 29442 CVE-2007-6085 MILW0RM:4632  View
309602 29442 CVE-2007-6085 URL:http://www.milw0rm.com/exploits/4632  View
309603 29442 CVE-2007-6085 BID:26484  View
309604 29442 CVE-2007-6085 URL:http://www.securityfocus.com/bid/26484  View
309605 29442 CVE-2007-6085 XF:vigilecms-message-xss(38556)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57659 JVNDB-2007-006351 VigileCMS の index.php におけるクロスサイトリクエストフォージェリの脆弱性 VigileCMS の index.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2007-6087 29442 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006351.html  View