CVE

Id
93343  
CVE No.
CVE-2016-6523  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) q or (2) link_type parameter to admin/media.php.  
Phase
Assigned (20160802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793565 93343 CVE-2016-6523 MLIST:[oss-security] 20160802 CVE request: XSS vulns in Dotclear v2.9.1  View
793566 93343 CVE-2016-6523 URL:http://www.openwall.com/lists/oss-security/2016/08/02/3  View
793567 93343 CVE-2016-6523 MLIST:[oss-security] 20160802 Re: CVE request: XSS vulns in Dotclear v2.9.1  View
793568 93343 CVE-2016-6523 URL:http://www.openwall.com/lists/oss-security/2016/08/02/13  View
793569 93343 CVE-2016-6523 CONFIRM:https://hg.dotclear.org/dotclear/file/18dc878c1178/CHANGELOG  View
793570 93343 CVE-2016-6523 CONFIRM:https://hg.dotclear.org/dotclear/rev/40d0207e520d  View
793571 93343 CVE-2016-6523 BID:92272  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5368 JVNDB-2016-006141 QEMU の hw/net/vmxnet3.c の vmxnet3_complete_packet 関数における重要なホストのメモリ情報を取得される脆弱性 QEMU (別名 Quick Emulator) の hw/net/vmxnet3.c の vmxnet3_complete_packet 関数には、重要なホストのメモリ情報を取得される脆弱性が存在します。 CVE-2016-6836 93343 2.1 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006141.html  View