4.3

CVE-2006-0204

Exploit

EPSS 0.77%
Veröffentlicht 13.01.2006 23:03:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain other fields in unspecified scripts.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wordcircle ≫ Wordcircle Version2.17

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.77%	0.712

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://evuln.com/vulns/28/summary.html

Vendor Advisory

Exploit

http://secunia.com/advisories/18440

Vendor Advisory

http://securityreason.com/securityalert/345

http://www.osvdb.org/22359

Exploit

http://www.securityfocus.com/archive/1/421746/100/0/threaded

http://www.securityfocus.com/bid/16227

http://www.vupen.com/english/advisories/2006/0185

https://exchange.xforce.ibmcloud.com/vulnerabilities/24106

https://nvd.nist.gov/vuln/detail/CVE-2006-0204

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-0204

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-0204

EUVD