CVE-2006-2497

2006-05-2002:59:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to default.asp or (2) get parameter to profile.asp.

References

secunia.com/advisories/20175

securityreason.com/securityalert/926

www.osvdb.org/25650

www.osvdb.org/25651

www.securityfocus.com/archive/1/434370/100/0/threaded

www.securityfocus.com/bid/18025

exchange.xforce.ibmcloud.com/vulnerabilities/26530