VulnerabilityModified
CVE-2006-0605
Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the (1) Handle or (2) Message fields.
MEDIUM 4.3EPSS 1.33%
Does this matter?
Lower severity and a low EPSS score (1.33%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the (1) Handle or (2) Message fields.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.33% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- unknown domain/shoutbox
- Source
- cve@mitre.org
References
- http://evuln.com/vulns/55/summary.htmlVendor Advisory
- http://secunia.com/advisories/18759Vendor Advisory
- http://www.securityfocus.com/archive/1/424679/100/0/threaded
- http://www.securityfocus.com/bid/16543
- http://www.vupen.com/english/advisories/2006/0476
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24440
- http://evuln.com/vulns/55/summary.htmlVendor Advisory
- http://secunia.com/advisories/18759Vendor Advisory
- http://www.securityfocus.com/archive/1/424679/100/0/threaded
- http://www.securityfocus.com/bid/16543
- http://www.vupen.com/english/advisories/2006/0476
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24440
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.