2.6
CVE-2006-1640
- EPSS 1.67%
- Veröffentlicht 06.04.2006 10:04:00
- Zuletzt bearbeitet 16.06.2026 22:23:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Czaries Network ≫ Czarnews Version1.14
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.67% | 0.737 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:N/I:P/A:N
|
http://evuln.com/vulns/118/summary.html
http://secunia.com/advisories/19541
http://securityreason.com/securityalert/732
http://securitytracker.com/id?1015957
http://www.osvdb.org/24381
http://www.securityfocus.com/archive/1/431132/100/0/threaded
http://www.securityfocus.com/bid/17380
http://www.vupen.com/english/advisories/2006/1237
https://exchange.xforce.ibmcloud.com/vulnerabilities/25623