5.8
CVE-2006-2140
- EPSS 1.98%
- Veröffentlicht 02.05.2006 10:02:00
- Zuletzt bearbeitet 16.06.2026 22:24:25
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Orbitscripts ≫ Orbithyip Version2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.98% | 0.779 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
http://pridels0.blogspot.com/2006/04/orbithyip-xss.html
http://secunia.com/advisories/19877
http://www.osvdb.org/25141
http://www.osvdb.org/25142
http://www.securityfocus.com/bid/17766
http://www.vupen.com/english/advisories/2006/1583
https://exchange.xforce.ibmcloud.com/vulnerabilities/26163