CVE

Id
29954  
CVE No.
CVE-2007-6597  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the (1) KW and (2) SF parameters to forum/login_user.asp, and (3) the Date parameter to blogs.asp.  
Phase
Assigned (20071231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316737 29954 CVE-2007-6597 BUGTRAQ:20071227 IPortalX Forums Cross-Site Scripting Vulnerability  View
316738 29954 CVE-2007-6597 URL:http://www.securityfocus.com/archive/1/archive/1/485546/100/0/threaded  View
316739 29954 CVE-2007-6597 MISC:http://www.hackerscenter.com/Archive/view.asp?id=28137  View
316740 29954 CVE-2007-6597 CONFIRM:http://www.iportalx.net/forum/forum_posts.asp?TID=3465&PN=1  View
316741 29954 CVE-2007-6597 BID:27044  View
316742 29954 CVE-2007-6597 URL:http://www.securityfocus.com/bid/27044  View
316743 29954 CVE-2007-6597 OSVDB:39860  View
316744 29954 CVE-2007-6597 URL:http://osvdb.org/39860  View
316745 29954 CVE-2007-6597 OSVDB:39861  View
316746 29954 CVE-2007-6597 URL:http://osvdb.org/39861  View
316747 29954 CVE-2007-6597 SECUNIA:28252  View
316748 29954 CVE-2007-6597 URL:http://secunia.com/advisories/28252  View
316749 29954 CVE-2007-6597 SREASON:3504  View
316750 29954 CVE-2007-6597 URL:http://securityreason.com/securityalert/3504  View
316751 29954 CVE-2007-6597 XF:iportalx-loginuser-blogs-xss(39249)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56090 JVNDB-2007-004782 OpenAFS の fileserver におけるサービス運用妨害 (DoS) の脆弱性 OpenAFS の fileserver は、競合状態により、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-6599 29954 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004782.html  View