CVE-2006-2000

CVE-2006-2000

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/04/logmethods-xss-vuln.html http://secunia.com/advisories/19793 https://exchange.xforce.ibmcloud.com/vulnerabilities/25968 http://www.osvdb.org/24876 http://www.securityfocus.com/bid/17675 http://www.vupen.com/english/advisories/2006/1484