CVE-2006-3043

Опубликовано: 16 июн. 2006

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in search.cfm in CreaFrameXe (CFXe) CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the voltext_suche parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2006-06/0149.html
http://secunia.com/advisories/20582
http://securitytracker.com/id?1016277
http://www.majorsecurity.de/advisory/major_rls14.txt
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2278
https://exchange.xforce.ibmcloud.com/vulnerabilities/27052
http://archives.neohapsis.com/archives/bugtraq/2006-06/0149.html
http://secunia.com/advisories/20582
http://securitytracker.com/id?1016277
http://www.majorsecurity.de/advisory/major_rls14.txt
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2278
https://exchange.xforce.ibmcloud.com/vulnerabilities/27052

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cfxe-cms:cfxe-cms:*:*:*:*:*:*:*:*

Версия до 2.0 (включая)

EPSS

Процентиль: 70%

0.00622

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5v79-hj7w-8p48

github

почти 4 года назад