CVE-2006-4528

2006-09-0123:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php.

References

acid-root.new.fr/advisories/09290806.txt

secunia.com/advisories/21715

securityreason.com/securityalert/1487

www.securityfocus.com/archive/1/444845/100/0/threaded

www.securityfocus.com/bid/19789

www.vupen.com/english/advisories/2006/3427

exchange.xforce.ibmcloud.com/vulnerabilities/28691