4.3
CVE-2006-2955
- EPSS 2.31%
- Veröffentlicht 12.06.2006 20:06:00
- Zuletzt bearbeitet 16.06.2026 22:26:07
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp, or the (3) cat or (4) albumid parameter to (b) album.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kaphotoservice ≫ Kaphotoservice Version <= 7.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.31% | 0.811 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2006/06/kaphotoservice-75-vuln.html
http://secunia.com/advisories/20521
http://securitytracker.com/id?1016253
http://www.osvdb.org/26275
http://www.osvdb.org/26276
http://www.securityfocus.com/bid/18379
http://www.vupen.com/english/advisories/2006/2251
https://exchange.xforce.ibmcloud.com/vulnerabilities/27073