2.6

CVE-2006-3245

Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mvnforum ≫ Mvnforum Version1.0.0_beta1
Mvnforum ≫ Mvnforum Version1.0.0_beta2
Mvnforum ≫ Mvnforum Version1.0.0_beta3
Mvnforum ≫ Mvnforum Version1.0.0_rc1
Mvnforum ≫ Mvnforum Version1.0.0_rc2
Mvnforum ≫ Mvnforum Version1.0.0_rc3_01
Mvnforum ≫ Mvnforum Version1.0.0_rc4
Mvnforum ≫ Mvnforum Version1.0.0_rc4_04
Mvnforum ≫ Mvnforum Version1.0_ga
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.73% 0.747
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://pridels0.blogspot.com/2006/06/mvnforum-xss-vuln.html
http://secunia.com/advisories/20803
Vendor Advisory
http://www.securityfocus.com/bid/18663
http://www.vupen.com/english/advisories/2006/2531
https://exchange.xforce.ibmcloud.com/vulnerabilities/27370