NVD

Id
64366  
Name
CVE-2006-5791  
Description
Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading, which is not quoted in an error message by the send_file_direct function, and (2) the Type or Category values in a New entry, which is not properly handled in an error message by the submit_elog function.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-11-07  
Modified Date
2011-03-07  
Seq
2006-5791  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335889 64366 CVE-2006-5791 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016  View
335890 64366 CVE-2006-5791 DSA-1242  View
335891 64366 CVE-2006-5791 20881  View
335892 64366 CVE-2006-5791 20882  View
335893 64366 CVE-2006-5791 ADV-2006-4315  View
335894 64366 CVE-2006-5791 elog-nonexistent-files-xss(29986)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61155 JVNDB-2006-003421 ELOG の elogd.c におけるクロスサイトスクリプティングの脆弱性 ELOG の elogd.c は、以下の不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5791 21893 CVE-2006-5791 64366 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003421.html 2006-11-07 2012-12-20 View