CVE

Id
44295  
CVE No.
CVE-2010-1711  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482914 44295 CVE-2010-1711 MISC:http://packetstormsecurity.org/1004-exploits/siestta-lfixss.txt  View
482915 44295 CVE-2010-1711 EXPLOIT-DB:12260  View
482916 44295 CVE-2010-1711 URL:http://www.exploit-db.com/exploits/12260  View
482917 44295 CVE-2010-1711 BID:39526  View
482918 44295 CVE-2010-1711 URL:http://www.securityfocus.com/bid/39526  View
482919 44295 CVE-2010-1711 OSVDB:63836  View
482920 44295 CVE-2010-1711 URL:http://www.osvdb.org/63836  View
482921 44295 CVE-2010-1711 SECUNIA:39453  View
482922 44295 CVE-2010-1711 URL:http://secunia.com/advisories/39453  View
482923 44295 CVE-2010-1711 XF:siestta-usuario-xss(57899)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39671 JVNDB-2010-005456 Joomla! 用の Online Examination コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用の Online Examination コンポーネントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1715 44295 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005456.html  View