NVD

Id
63733  
Name
CVE-2006-5127  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Bartels Schoene ConPresso before 4.0.5a allow remote attackers to inject arbitrary web script or HTML via (1) the nr parameter in detail.php, (2) the msg parameter in db_mysql.inc.php, and (3) the pos parameter in index.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-03  
Modified Date
2011-03-07  
Seq
2006-5127  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332174 63733 CVE-2006-5127 http://download.compresso.de/compresso-4.0.5a.zip  View
332175 63733 CVE-2006-5127 1671  View
332176 63733 CVE-2006-5127 http://www.majorsecurity.de/index_2.php?major_rls=major_rls28  View
332177 63733 CVE-2006-5127 20060929 [MajorSecurity Advisory #28]ConPresso CMS - Multiple Cross Site Scripting and SQL Injection Issues  View
332178 63733 CVE-2006-5127 20273  View
332179 63733 CVE-2006-5127 ADV-2006-3868  View
332180 63733 CVE-2006-5127 conpressocms-multiple-scripts-xss(29272)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59078 JVNDB-2006-001344 Bartels Schoene ConPresso におけるクロスサイトスクリプティングの脆弱性 Bartels Schoene ConPresso には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5127 21229 CVE-2006-5127 63733 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001344.html 2006-10-03 2012-06-26 View