Логотип exploitDog
bind:CVE-2006-4712
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2006-4712

Количество 4

Количество 4

ubuntu логотип

CVE-2006-4712

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2006-4712

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

CVSS2: 6.8
EPSS: Низкий
debian логотип

CVE-2006-4712

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allo ...

CVSS2: 6.8
EPSS: Низкий
github логотип

GHSA-cjj3-jhjg-w3f9

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2006-4712

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

CVSS2: 6.8
3%
Низкий
почти 19 лет назад
nvd логотип
CVE-2006-4712

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

CVSS2: 6.8
3%
Низкий
почти 19 лет назад
debian логотип
CVE-2006-4712

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allo ...

CVSS2: 6.8
3%
Низкий
почти 19 лет назад
github логотип
GHSA-cjj3-jhjg-w3f9

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

3%
Низкий
больше 3 лет назад

Уязвимостей на страницу