Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-2303

Опубликовано: 11 мая 2006
Источник: nvd
CVSS2: 6.4
EPSS Низкий

Описание

Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mirabilis:icq:5.04_build2321:*:*:*:*:*:*:*

EPSS

Процентиль: 73%
0.00757
Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object.

EPSS

Процентиль: 73%
0.00757
Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other