5.8

CVE-2006-3002

Exploit
Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.39% 0.687
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20539
Vendor Advisory
Exploit
http://securityreason.com/securityalert/1079
http://www.securityfocus.com/archive/1/436413
Exploit
http://www.securityfocus.com/bid/18339
Exploit
http://www.vupen.com/english/advisories/2006/2248
https://exchange.xforce.ibmcloud.com/vulnerabilities/27109