CVE-2006-4660

2006-09-0900:00:00

mitre

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed.

References

secunia.com/advisories/21809

securityreason.com/securityalert/1523

www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510

www.securityfocus.com/archive/1/445515/100/0/threaded

www.securityfocus.com/bid/19900

www.vupen.com/english/advisories/2006/3528

exchange.xforce.ibmcloud.com/vulnerabilities/28809