CVE

Id
9746  
CVE No.
CVE-2004-1318  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab ("%09") character, which prevents the rest of the query from being properly sanitized.  
Phase
Assigned (20050103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66169 9746 CVE-2004-1318 MISC:http://jvn.jp/jp/JVN%23904429FE.html  View
66170 9746 CVE-2004-1318 CONFIRM:http://www.namazu.org/security.html.en#xss-tab  View
66171 9746 CVE-2004-1318 DEBIAN:DSA-627  View
66172 9746 CVE-2004-1318 URL:http://www.debian.org/security/2005/dsa-627  View
66173 9746 CVE-2004-1318 FEDORA:FEDORA-2004-557  View
66174 9746 CVE-2004-1318 URL:http://www.linuxsecurity.com/content/view/117604/102/  View
66175 9746 CVE-2004-1318 HP:HPSBMA01212  View
66176 9746 CVE-2004-1318 URL:http://www.securityfocus.com/advisories/9028  View
66177 9746 CVE-2004-1318 SUSE:SUSE-SR:2005:001  View
66178 9746 CVE-2004-1318 URL:http://www.novell.com/linux/security/advisories/2005_01_sr.html  View
66179 9746 CVE-2004-1318 BID:12053  View
66180 9746 CVE-2004-1318 URL:http://www.securityfocus.com/bid/12053  View
66181 9746 CVE-2004-1318 OSVDB:12516  View
66182 9746 CVE-2004-1318 URL:http://www.osvdb.org/12516  View
66183 9746 CVE-2004-1318 SECTRACK:1012802  View
66184 9746 CVE-2004-1318 URL:http://securitytracker.com/alerts/2005/Jan/1012802.html  View
66185 9746 CVE-2004-1318 SECTRACK:1012805  View
66186 9746 CVE-2004-1318 URL:http://securitytracker.com/alerts/2005/Jan/1012805.html  View
66187 9746 CVE-2004-1318 SECUNIA:13600  View
66188 9746 CVE-2004-1318 URL:http://secunia.com/advisories/13600  View
66189 9746 CVE-2004-1318 XF:namazu-tab-query-xss(18623)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63213 JVNDB-2004-000555 Microsoft Internet Explorer の dhtmled.ocx におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer には、DHTML Edit ActiveX コントロール dhtmled.ocx の execScript() 関数の処理に不備が存在するため、意図的に作成されたリンクをクリックした場合にクロスサイトスクリプティングの脆弱性が存在します。 CVE-2004-1319 9746 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000555.html  View