4.3
CVE-2006-1687
- EPSS 1.17%
- Veröffentlicht 11.04.2006 00:02:00
- Zuletzt bearbeitet 16.06.2026 22:23:26
- Erkennungen
LoginCross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably involving the basket functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apt ≫ Apt-webshop-system Version 3.0 Edition basic
Apt ≫ Apt-webshop-system Version 3.0 Edition light
Apt ≫ Apt-webshop-system Version 4.0 Edition pro
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.632 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html
http://secunia.com/advisories/19592
http://www.vupen.com/english/advisories/2006/1293