Lucene search
HistoryMar 01, 2006 - 2:02 a.m.
CVE-2006-0941
cve-2006-0941
cross-site scripting
xss
shoutlive 1.1.0
post.php
web security
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.3%
Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cynical_games:shoutlive | cynical games shoutlive | eq | 1.1.0 |
References
Related
prion
prion
Cross site scripting
2006-03-01 02:02:00
packetstorm
packetstorm
EV0087.txt
2006-03-09 00:00:00
securityvulns
securityvulns
[eVuln] ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities
2006-03-08 00:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.3%
Related for CVE-2006-0941