6.8
CVE-2006-6148
- EPSS 1.63%
- Veröffentlicht 28.11.2006 23:28:00
- Zuletzt bearbeitet 16.06.2026 22:32:33
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the (1) lName, (2) lURL, (3) lImage, and (4) lDescription parameters. NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jiros ≫ Links Manager Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.63% | 0.731 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/23063
http://securitytracker.com/id?1017280
http://www.frsirt.com/english/reference-2006-4664-1.php
http://www.securityfocus.com/archive/1/452265/100/0/threaded
http://www.securityfocus.com/bid/21226
http://www.vupen.com/english/advisories/2006/4664
http://securityreason.com/securityalert/1924
https://exchange.xforce.ibmcloud.com/vulnerabilities/30465