CVE-2006-4711

Exploit

EPSS 0.4%
Published 12.09.2006 16:07:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Sage ≫ Sage

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.4%	0.597

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://www.snellspace.com/wp/?p=448

Exploit

http://mozdev.org/bugs/show_bug.cgi?id=15101

Exploit

http://www.snellspace.com/wp/?p=410

https://nvd.nist.gov/vuln/detail/CVE-2006-4711

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4711

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4711

EUVD