6.8

CVE-2006-6712

Cross-site scripting (XSS) vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sugarcrm ≫ Sugarcrm Version <= 4.5.0f
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.39% 0.687
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://dl.sugarforge.org/sugardocs/Notes/ReleaseNotes/SugarOpenSource_ReleaseNotes_4.5.0g.pdf
URL Repurposed
http://jvn.jp/jp/JVN%2374079537/index.html
http://secunia.com/advisories/23424
Patch
Vendor Advisory
http://securitytracker.com/id?1017434
http://www.securityfocus.com/bid/21694
http://www.vupen.com/english/advisories/2006/5100