4.3
CVE-2006-4528
- EPSS 1.31%
- Veröffentlicht 01.09.2006 23:04:00
- Zuletzt bearbeitet 16.06.2026 22:29:16
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Membrepass ≫ Membrepass Version1.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.31% | 0.67 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://acid-root.new.fr/advisories/09290806.txt
http://secunia.com/advisories/21715
http://securityreason.com/securityalert/1487
http://www.securityfocus.com/archive/1/444845/100/0/threaded
http://www.securityfocus.com/bid/19789
http://www.vupen.com/english/advisories/2006/3427
https://exchange.xforce.ibmcloud.com/vulnerabilities/28691