5.1

CVE-2006-5059

Exploit

EPSS 1.29%
Veröffentlicht 28.09.2006 00:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wired Community Software ≫ Wwwthreads Version <= 5.4.2

Wired Community Software ≫ Wwwthreads Version5.4

Wired Community Software ≫ Wwwthreads Versionrc3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.29%	0.789

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/22211

http://securityreason.com/securityalert/1645

http://www.securityfocus.com/archive/1/446911/100/0/threaded

http://www.securityfocus.com/bid/20178

Exploit

http://www.vupen.com/english/advisories/2006/3858

https://nvd.nist.gov/vuln/detail/CVE-2006-5059

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5059

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5059

EUVD