2.6

CVE-2006-1064

Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lurker ≫ Lurker Version0.1a
Lurker ≫ Lurker Version2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.743
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/19136
Patch
Vendor Advisory
http://secunia.com/advisories/19145
http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168
Patch
http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html
Vendor Advisory
http://www.debian.org/security/2006/dsa-999
http://www.securityfocus.com/bid/17003
http://www.vupen.com/english/advisories/2006/0850
http://www.osvdb.org/23696
https://exchange.xforce.ibmcloud.com/vulnerabilities/25154