4.3
CVE-2006-1687
- EPSS 1.17%
- Veröffentlicht 11.04.2006 00:02:00
- Zuletzt bearbeitet 16.06.2026 22:23:26
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably involving the basket functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apt ≫ Apt-webshop-system Version3.0 Editionbasic
Apt ≫ Apt-webshop-system Version3.0 Editionlight
Apt ≫ Apt-webshop-system Version4.0 Editionpro
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.632 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html
http://secunia.com/advisories/19592
http://www.vupen.com/english/advisories/2006/1293