4.3
CVE-2006-1425
- EPSS 2.09%
- Veröffentlicht 28.03.2006 20:02:00
- Zuletzt bearbeitet 16.06.2026 22:22:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyfamily ≫ Phpmyfamily Version1.4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.09% | 0.792 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://marc.info/?l=full-disclosure&m=114344921211241&w=2
http://secunia.com/advisories/19409
http://securityreason.com/securityalert/636
http://www.osvdb.org/24166
http://www.securityfocus.com/archive/1/428901/100/0/threaded
http://www.securityfocus.com/bid/17278
http://www.vupen.com/english/advisories/2006/1130
https://exchange.xforce.ibmcloud.com/vulnerabilities/25476