CVE-2006-0521

2006-02-0211:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON

Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.

References

secunia.com/advisories/18658

securityreason.com/securityalert/393

www.osvdb.org/22841

www.securityfocus.com/archive/1/423546/100/0/threaded

www.securityfocus.com/bid/16435

www.vupen.com/english/advisories/2006/0391

exchange.xforce.ibmcloud.com/vulnerabilities/24390