CVE-2006-3060

2006-06-1910:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read parameter in index.php, (2) farea parameter in faq.php, and (3) unspecified input fields on the “My Account” login page.

References

secunia.com/advisories/20601

securityreason.com/securityalert/1108

www.securityfocus.com/archive/1/436650/100/0/threaded

www.vupen.com/english/advisories/2006/2304

exchange.xforce.ibmcloud.com/vulnerabilities/27157