CVE-2006-6589

Опубликовано: 15 дек. 2006

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 allows remote attackers to inject arbitrary web script or HTML via the SEARCH_STRING parameter, a different issue than CVE-2006-6587. NOTE: some of these details are obtained from third party information.

Ссылки

http://jira.undersunconsulting.com/browse/OFBIZ-559
http://secunia.com/advisories/23457
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/21702
https://issues.apache.org/jira/browse/OFBIZ-260
Exploit
http://jira.undersunconsulting.com/browse/OFBIZ-559
http://secunia.com/advisories/23457
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/21702
https://issues.apache.org/jira/browse/OFBIZ-260
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*

cpe:2.3:a:apache:opentaps:0.9.3:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07443

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4cw5-g4mj-3m5f

github

почти 4 года назад