4.3
CVE-2006-3428
- EPSS 1.32%
- Veröffentlicht 07.07.2006 00:05:00
- Zuletzt bearbeitet 16.06.2026 22:27:02
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tigertom Scripts ≫ Ttcalc Script Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.32% | 0.67 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/20952
http://www.osvdb.org/27035
http://www.osvdb.org/27036
http://www.securityfocus.com/archive/1/439208/100/0/threaded
http://www.securityfocus.com/bid/18844
http://www.vupen.com/english/advisories/2006/2692
https://exchange.xforce.ibmcloud.com/vulnerabilities/27563