4.3
CVE-2006-0134
- EPSS 1.74%
- Veröffentlicht 09.01.2006 11:03:00
- Zuletzt bearbeitet 16.06.2026 22:19:57
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thewebforum ≫ Thewebforum Version <= 1.2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.74% | 0.748 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://evuln.com/vulns/17/exploit.html
http://evuln.com/vulns/17/summary.html
http://secunia.com/advisories/18392
http://securitytracker.com/id?1015450
http://www.osvdb.org/22295
http://www.securityfocus.com/archive/1/421039/100/0/threaded
http://www.securityfocus.com/bid/16161
http://www.vupen.com/english/advisories/2006/0093
https://exchange.xforce.ibmcloud.com/vulnerabilities/24007