CVE-2006-4608

CVE-2006-4608

Published · Updated

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.0%
exploitation probability
5.0%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cadena parameter in busqueda.php and the (2) email parameter in lista.php.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/8425
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://secunia.com/advisories/21738http://securityreason.com/securityalert/1499https://www.exploit-db.com/exploits/8425http://www.attrition.org/pipermail/vim/2009-April/002167.htmlhttp://www.osvdb.org/28450http://www.securityfocus.com/archive/1/445007/100/0/threadedhttp://www.securityfocus.com/archive/1/502637/100/0/threadedhttp://www.securityfocus.com/bid/19818