CVE-2007-6142
published 2007-11-27CVE-2007-6142: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script…
PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.02%
59.1th percentile
Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) show parameter to index.php and the (2) print parameter to print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| salims_softhouse | jaf_cms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2006-6142 Three XSS issues in SquirrelMail
bugzilla·2006-12-04·CVSS 6.8
CVE-2006-6142 [MEDIUM] CVE-2006-6142 Three XSS issues in SquirrelMail
CVE-2006-6142 Three XSS issues in SquirrelMail
+++ This bug was initially created as a clone of Bug #218294 +++
Description of problem:
Martijn Brinkers identified several XSS issues in versions 1.4.0 to 1.4.9 of
SquirrelMail. Fix for each one is available from upstream.
Version-Release number of selected component (if applicable):
1.4.0-1.4.9
RHEL{3,4,5}, FC{5,6}
Additional info:
Patches are here:
http://www.squirrelmail.org/patches/1.4.9-security/stable/
Discussion:
I strongly recommend checking background information about issues fixed in
SquirrelMail patches.
---
New version available, 1.4.10a, which fixes several XSS issues. Please update.
---
squirrelmail should be upgraded to squirrelmail-1.4.10a-1.fc6 in fc6. This
update also fixes CVE-2006-6142 and CVE-2007:1262.
Bugzilla
CVE-2006-6142 Three XSS issues in SquirrelMail
bugzilla·2006-12-04·CVSS 6.8
CVE-2006-6142 [MEDIUM] CVE-2006-6142 Three XSS issues in SquirrelMail
CVE-2006-6142 Three XSS issues in SquirrelMail
Description of problem:
Martijn Brinkers identified several XSS issues in versions 1.4.0 to 1.4.9 of
SquirrelMail. Fix for each one is available from upstream.
Version-Release number of selected component (if applicable):
1.4.0-1.4.9
RHEL{3,4,5}, FC{5,6}
Additional info:
Patches are here:
http://www.squirrelmail.org/patches/1.4.9-security/stable/
Discussion:
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.
http://rhn.redhat.com/errata/RHSA-2007-0022.html
2007-11-27
Published