CVE

Id
29931  
CVE No.
CVE-2007-6574  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the origin parameter to work/work.php in a display_upload_form action, or the forum parameter to (2) forum/viewforum.php or (3) forum/viewthread.php.  
Phase
Assigned (20071228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316485 29931 CVE-2007-6574 BUGTRAQ:20071222 [HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities  View
316486 29931 CVE-2007-6574 URL:http://www.securityfocus.com/archive/1/archive/1/485458/100/0/threaded  View
316487 29931 CVE-2007-6574 BID:26992  View
316488 29931 CVE-2007-6574 URL:http://www.securityfocus.com/bid/26992  View
316489 29931 CVE-2007-6574 OSVDB:39771  View
316490 29931 CVE-2007-6574 URL:http://osvdb.org/39771  View
316491 29931 CVE-2007-6574 OSVDB:39772  View
316492 29931 CVE-2007-6574 URL:http://osvdb.org/39772  View
316493 29931 CVE-2007-6574 OSVDB:39773  View
316494 29931 CVE-2007-6574 URL:http://osvdb.org/39773  View
316495 29931 CVE-2007-6574 SREASON:3481  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54350 JVNDB-2007-003042 Adult Script における SQL インジェクションの脆弱性 Adult Script には、SQL インジェクションの脆弱性が存在します。 CVE-2007-6576 29931 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003042.html  View