CVE-2006-6035

2006-11-2200:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.9%

JSON

Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the FADDR parameter.

References

marc.info/?l=bugtraq&m=116387287216907&w=2

secunia.com/advisories/23025

securitytracker.com/id?1017250

www.securityfocus.com/bid/21173

www.vupen.com/english/advisories/2006/4598

exchange.xforce.ibmcloud.com/vulnerabilities/30385