CVE-2006-5071

🗓️ 28 Sep 2006 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Multiple XSS vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2006-5071	28 Sep 200600:00	–	cvelist
FreeBSD	eyeOS -- multiple XSS security bugs	25 Sep 200600:00	–	freebsd
EUVD	EUVD-2006-5056	7 Oct 202500:30	–	euvd
Tenable Nessus	FreeBSD : eyeOS -- multiple XSS security bugs (d3527663-4ccb-11db-b48d-00508d6a62df)	27 Sep 200600:00	–	nessus
NVD	CVE-2006-5071	28 Sep 200600:07	–	nvd
OpenVAS	FreeBSD Ports: eyeOS	4 Sep 200800:00	–	openvas
OpenVAS	FreeBSD Ports: eyeOS	4 Sep 200800:00	–	openvas

NVD

Node

Source	Link
eyeos	www.eyeos.blogspot.com/2006/09/eyeos-091-released.html
secunia	www.secunia.com/advisories/22117
vupen	www.vupen.com/english/advisories/2006/3780
securityfocus	www.securityfocus.com/bid/20213
sourceforge	www.sourceforge.net/project/shownotes.php
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/29190

Parameter	Position	Path	Description	CWE
eyeNav	query param	/eyeNav	Cross-site scripting vulnerability in eyeNav component allowing remote injection of scripts	CWE-79
baixar	query param	/system/baixar.php	Cross-site scripting vulnerability in baixar.php endpoint enabling script injection	CWE-79

16 Jun 2026 22:30Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

EPSS0.01272