4.3
CVE-2006-4796
- EPSS 2.37%
- Veröffentlicht 14.09.2006 21:07:00
- Zuletzt bearbeitet 16.06.2026 22:29:48
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter (strtopicsortord variable).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Snitz Communications ≫ Snitz Forums 2000 Version3.4.06
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.37% | 0.817 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62773
http://secunia.com/advisories/21946
http://securityreason.com/securityalert/1578
http://www.osvdb.org/28832
http://www.securityfocus.com/archive/1/445902/100/0/threaded
http://www.securityfocus.com/archive/1/446043/100/0/threaded
http://www.securityfocus.com/bid/20004
http://www.vupen.com/english/advisories/2006/3632
https://exchange.xforce.ibmcloud.com/vulnerabilities/28921