CVE

Id
94801  
CVE No.
CVE-2016-7981  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the var_url parameter in a valider_xml action.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
797616 94801 CVE-2016-7981 MLIST:[oss-security] 20161005 SPIP vulnerabilities: request for 5 CVE  View
797617 94801 CVE-2016-7981 URL:http://www.openwall.com/lists/oss-security/2016/10/05/17  View
797618 94801 CVE-2016-7981 MLIST:[oss-security] 20161006 Re: SPIP vulnerabilities: request for 5 CVE  View
797619 94801 CVE-2016-7981 URL:http://www.openwall.com/lists/oss-security/2016/10/06/6  View
797620 94801 CVE-2016-7981 MLIST:[oss-security] 20161012 CVE-2016-7981: SPIP 3.1.2 Reflected Cross-Site Scripting  View
797621 94801 CVE-2016-7981 URL:http://www.openwall.com/lists/oss-security/2016/10/12/7  View
797622 94801 CVE-2016-7981 CONFIRM:https://core.spip.net/projects/spip/repository/revisions/23200  View
797623 94801 CVE-2016-7981 CONFIRM:https://core.spip.net/projects/spip/repository/revisions/23201  View
797624 94801 CVE-2016-7981 CONFIRM:https://core.spip.net/projects/spip/repository/revisions/23202  View
797625 94801 CVE-2016-7981 BID:93451  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4771 JVNDB-2016-005544 Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Query に関する脆弱性 Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools には、Query に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2016-8294 94801 4 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005544.html  View