5.8

CVE-2006-2641

** UNVERIFIABLE **  NOTE: this issue does not contain any verifiable or actionable details.  Cross-site scripting (XSS) vulnerability in John Frank Asset Manager (AssetMan) 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input."  NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors.  Perhaps this should not be included in CVE.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
John Frank ≫ Asset Manager Version2.4a
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.28% 0.661
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20285
Vendor Advisory
http://securityreason.com/securityalert/979
http://www.securityfocus.com/archive/1/435139/100/0/threaded
http://www.securityfocus.com/bid/18131
http://www.vupen.com/english/advisories/2006/2023
https://exchange.xforce.ibmcloud.com/vulnerabilities/26702