exploitDog

CVE-2006-0204

Опубликовано: 13 янв. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain other fields in unspecified scripts.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wordcircle:wordcircle:2.17:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00773

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9699-8gv5-47m4

github

почти 4 года назад

Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain other fields in unspecified scripts.

EPSS

Процентиль: 73%

0.00773

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other