CVE-2006-5847

Опубликовано: 10 нояб. 2006

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

Ссылки

http://marc.info/?l=bugtraq&m=116303405916694&w=2
Mailing List
http://secunia.com/advisories/22786
Permissions Required
Third Party Advisory
http://securitytracker.com/id?1017200
Third Party Advisory
VDB Entry
http://www.freewebshop.org/?id=27
Not Applicable
http://www.freewebshop.org/?id=28
Patch
Vendor Advisory
http://www.securityfocus.com/bid/20969
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4420
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/30126
http://marc.info/?l=bugtraq&m=116303405916694&w=2
Mailing List
http://secunia.com/advisories/22786
Permissions Required
Third Party Advisory
http://securitytracker.com/id?1017200
Third Party Advisory
VDB Entry
http://www.freewebshop.org/?id=27
Not Applicable
http://www.freewebshop.org/?id=28
Patch
Vendor Advisory
http://www.securityfocus.com/bid/20969
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4420
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/30126

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freewebshop:freewebshop:*:*:*:*:*:*:*:*

Версия до 2.2.2 (включая)

EPSS

Процентиль: 88%

0.03972

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6vwr-7h5m-9whj