NVD

Id
62207  
Name
CVE-2006-3533  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) fg, (2) line1, (3) line2, (4) bg, (5) c1, (6) c2, (7) c3, and (8) c4 parameters in (a) includes/blogroll.php; (9) name and (10) js_name parameters in (b) includes/editor/edit_menu.php; and, even if register_globals is not enabled, the (11) h and (12) w parameters in (c) includes/photo.php.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-12  
Modified Date
2011-03-07  
Seq
2006-3533  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322279 62207 CVE-2006-3533 http://retrogod.altervista.org/pivot_130RC2_xpl.html  View
322280 62207 CVE-2006-3533 1214  View
322281 62207 CVE-2006-3533 20060707 Pivot <=1.30rc2 privilege escalation / remote commands execution  View
322282 62207 CVE-2006-3533 18881  View
322283 62207 CVE-2006-3533 ADV-2006-2744  View
322284 62207 CVE-2006-3533 pivot-multiple-scripts-xss(27672)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60468 JVNDB-2006-002734 Pivot におけるクロスサイトスクリプティングの脆弱性 Pivot には、register_globals が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3533 19635 CVE-2006-3533 62207 5.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002734.html 2006-07-12 2012-12-20 View