CVE-2006-5530

Опубликовано: 26 окт. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/index.php, (2) admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Ссылки

http://secunia.com/advisories/22535
Patch
Vendor Advisory
http://www.boesch-it.de/sw/php-scripts/simpnews/english/index.php
Patch
http://www.securityfocus.com/bid/20714
Exploit
Patch
http://www.vupen.com/english/advisories/2006/4162
http://secunia.com/advisories/22535
Patch
Vendor Advisory
http://www.boesch-it.de/sw/php-scripts/simpnews/english/index.php
Patch
http://www.securityfocus.com/bid/20714
Exploit
Patch
http://www.vupen.com/english/advisories/2006/4162

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:boesch_it-consulting:simpnews:*:*:*:*:*:*:*:*

Версия до 2.34 (включая)

cpe:2.3:a:boesch_it-consulting:simpnews:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:boesch_it-consulting:simpnews:2.13:*:*:*:*:*:*:*

cpe:2.3:a:boesch_it-consulting:simpnews:2.30:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00428

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-975j-fq85-vmrj

github

почти 4 года назад