Логотип exploitDog
bind:CVE-2006-6197
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2006-6197

Количество 3

Количество 3

nvd логотип

CVE-2006-6197

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_found.page.php, (b) _410_stats_gone.page.php, and (c) _referer_spam.page.php in inc/VIEW/errors/; the (2) baseurl parameter in (d) inc/VIEW/errors/_404_not_found.page.php; and the (3) ReqURI parameter in (e) inc/VIEW/errors/_referer_spam.page.php.

CVSS2: 6.8
EPSS: Низкий
debian логотип

CVE-2006-6197

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8 ...

CVSS2: 6.8
EPSS: Низкий
github логотип

GHSA-9mm5-29w5-wpvq

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_found.page.php, (b) _410_stats_gone.page.php, and (c) _referer_spam.page.php in inc/VIEW/errors/; the (2) baseurl parameter in (d) inc/VIEW/errors/_404_not_found.page.php; and the (3) ReqURI parameter in (e) inc/VIEW/errors/_referer_spam.page.php.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2006-6197

Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_found.page.php, (b) _410_stats_gone.page.php, and (c) _referer_spam.page.php in inc/VIEW/errors/; the (2) baseurl parameter in (d) inc/VIEW/errors/_404_not_found.page.php; and the (3) ReqURI parameter in (e) inc/VIEW/errors/_referer_spam.page.php.

CVSS2: 6.8
1%
Низкий
почти 19 лет назад
debian логотип
CVE-2006-6197

Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8 ...

CVSS2: 6.8
1%
Низкий
почти 19 лет назад
github логотип
GHSA-9mm5-29w5-wpvq

Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_found.page.php, (b) _410_stats_gone.page.php, and (c) _referer_spam.page.php in inc/VIEW/errors/; the (2) baseurl parameter in (d) inc/VIEW/errors/_404_not_found.page.php; and the (3) ReqURI parameter in (e) inc/VIEW/errors/_referer_spam.page.php.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу