CVE-2006-4634

2006-09-0820:00:00

mitre

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.008

Percentile

81.6%

JSON

Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441.

References

secunia.com/advisories/16220

securityreason.com/securityalert/1520

www.securityfocus.com/archive/1/445000/100/0/threaded

www.securityfocus.com/bid/19803

exchange.xforce.ibmcloud.com/vulnerabilities/28719