CVE-2006-2870

CVE-2006-2870

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://colander.altervista.org/advisory/ASPDisc.txt http://secunia.com/advisories/20425 https://exchange.xforce.ibmcloud.com/vulnerabilities/26929 http://www.securityfocus.com/bid/18237 http://www.vupen.com/english/advisories/2006/2113