CVE

Id
29667  
CVE No.
CVE-2007-6310  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php, and (3) the topic parameter to modules/feed/feed.php (aka modules/feed.php).  
Phase
Assigned (20071211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312762 29667 CVE-2007-6310 BUGTRAQ:20071210 Falt4 CMS Security Report/Advisory  View
312763 29667 CVE-2007-6310 URL:http://www.securityfocus.com/archive/1/archive/1/484813/100/0/threaded  View
312764 29667 CVE-2007-6310 MILW0RM:4711  View
312765 29667 CVE-2007-6310 URL:http://www.milw0rm.com/exploits/4711  View
312766 29667 CVE-2007-6310 MISC:http://www.h-labs.org/blog/2007/12/05/falt4_cms_security_report_advisory.html  View
312767 29667 CVE-2007-6310 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=762931  View
312768 29667 CVE-2007-6310 BID:26786  View
312769 29667 CVE-2007-6310 URL:http://www.securityfocus.com/bid/26786  View
312770 29667 CVE-2007-6310 SECUNIA:28045  View
312771 29667 CVE-2007-6310 URL:http://secunia.com/advisories/28045  View
312772 29667 CVE-2007-6310 SREASON:3436  View
312773 29667 CVE-2007-6310 URL:http://securityreason.com/securityalert/3436  View
312774 29667 CVE-2007-6310 XF:falt4-index-feed-xss(38952)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57720 JVNDB-2007-006412 Websense Enterprise および Web Security Suite の Web Reporting Tools portal におけるクロスサイトスクリプティングの脆弱性 Websense Enterprise および Web Security Suite の Web Reporting Tools portal のログオンページには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-6312 29667 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006412.html  View