VulnerabilityModified
CVE-2006-0215
Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
MEDIUM 4.3EPSS 0.99%
Does this matter?
Lower severity and a low EPSS score (0.99%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. NOTE: this issue might be resultant from CVE-2006-0216.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 0.99% probability · 61th percentile
- CISA KEV
- Not listed
- Affected
- qualityebiz/quality ppc
- Source
- cve@mitre.org
References
- http://osvdb.org/ref/22/22352-qualityppc.txtExploit, Vendor Advisory
- http://www.osvdb.org/22352Exploit
- http://osvdb.org/ref/22/22352-qualityppc.txtExploit, Vendor Advisory
- http://www.osvdb.org/22352Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.