Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-6983

Опубликовано: 09 фев. 2007
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:myweb4net:myweb4net_browser:3.8.8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.00295
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.

EPSS

Процентиль: 52%
0.00295
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other