2.6
CVE-2006-2997
- EPSS 1.31%
- Veröffentlicht 13.06.2006 01:02:00
- Zuletzt bearbeitet 16.06.2026 22:26:11
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zms Publishing ≫ Zms Version <= 2.9.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.31% | 0.669 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/20585
http://securityreason.com/securityalert/1093
http://securitytracker.com/id?1016275
http://www.majorsecurity.de/advisory/major_rls12.txt
http://www.securityfocus.com/archive/1/436703/100/0/threaded
http://www.vupen.com/english/advisories/2006/2279
https://exchange.xforce.ibmcloud.com/vulnerabilities/27055