4.3

CVE-2006-1290

Exploit

EPSS 1.16%
Veröffentlicht 19.03.2006 23:02:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) ipAddress, (2) act, (3) username, and (4) unspecified other parameters in (a) authuser.php; and the (5) username and (6) unspecified other parameters in (b) userstatistics.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Milkeyway ≫ Milkeyway Captive Portal Version0.1

Milkeyway ≫ Milkeyway Captive Portal Version0.1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.16%	0.767

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/19258

http://securitytracker.com/id?1015778

http://www.securityfocus.com/archive/1/427890/100/0/threaded

http://www.securityfocus.com/bid/17127

http://www.ush.it/team/ascii/hack-milkeway/advisory.txt

http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt

Exploit

http://www.vupen.com/english/advisories/2006/0968

http://www.osvdb.org/23932

http://www.osvdb.org/23933

https://exchange.xforce.ibmcloud.com/vulnerabilities/25288

https://nvd.nist.gov/vuln/detail/CVE-2006-1290

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1290

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1290

EUVD