CVE-2006-1277

2006-03-1911:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

JSON

Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject arbitrary web script or HTML via the (1) real_name, (2) email, and (3) login parameters.

References

evuln.com/vulns/95/summary.html

secunia.com/advisories/19224

securitytracker.com/id?1015826

www.osvdb.org/23850

www.securityfocus.com/archive/1/428659/100/0/threaded

www.securityfocus.com/bid/17090

www.vupen.com/english/advisories/2006/0943

exchange.xforce.ibmcloud.com/vulnerabilities/25182