4.3

CVE-2006-0217

Exploit

EPSS 0.97%
Veröffentlicht 16.01.2006 19:03:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in item.pl and (2) category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wrong since the current version as of 20060116 is 3.6.1.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ultimate Auction ≫ Ultimate Auction Version3.67

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.97%	0.745

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0517.html

Exploit

http://secunia.com/advisories/18477

Vendor Advisory

Exploit

http://www.osvdb.org/22443

http://www.osvdb.org/22444

http://www.securityfocus.com/bid/16239

Exploit

http://www.securityfocus.com/bid/16254

http://www.vupen.com/english/advisories/2006/0187

https://exchange.xforce.ibmcloud.com/vulnerabilities/24138

https://nvd.nist.gov/vuln/detail/CVE-2006-0217

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-0217

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-0217

EUVD