6.8
CVE-2006-6389
- EPSS 1.8%
- Veröffentlicht 08.12.2006 01:28:00
- Zuletzt bearbeitet 16.06.2026 22:33:01
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the (1) Taaa parameter to (a) up.php, or the (2) pollhtml and (3) Bloks parameters to (b) polls.php, different vectors than CVE-2006-5770.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.8% | 0.756 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://securityreason.com/securityalert/2018
http://www.osvdb.org/37047
http://www.osvdb.org/37048
http://www.securityfocus.com/archive/1/453428/100/0/threaded
http://www.securityfocus.com/bid/21427