4.3
CVE-2006-2990
- EPSS 1.28%
- Veröffentlicht 13.06.2006 01:02:00
- Zuletzt bearbeitet 16.06.2026 22:26:11
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vanillasoft ≫ Vanillasoft Helpdesk Version2005
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.28% | 0.661 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2006/06/vanillasoft-helpdesk-xss-vuln.html
http://secunia.com/advisories/20544
http://securitytracker.com/id?1016254
http://www.securityfocus.com/bid/18368
http://www.vupen.com/english/advisories/2006/2247
https://exchange.xforce.ibmcloud.com/vulnerabilities/27020