CVE-2006-3071

CVE-2006-3071

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter, as used by the "search box", and (2) res parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/20664 http://securityreason.com/securityalert/1112 https://exchange.xforce.ibmcloud.com/vulnerabilities/27234 http://www.osvdb.org/26530 http://www.securityfocus.com/archive/1/437283/100/0/threaded http://www.vupen.com/english/advisories/2006/2385