VulnerabilityModified
CVE-2006-3385
Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) id and (2) disabled parameters.
MEDIUM 5.8EPSS 1.97%
Does this matter?
Lower severity and a low EPSS score (1.97%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) id and (2) disabled parameters.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 1.97% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- vincent leclercq/news
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/20936Vendor Advisory
- http://www.acid-root.new.fr/advisories/news52.txtVendor Advisory
- http://www.securityfocus.com/archive/1/438859/100/0/threaded
- http://www.securityfocus.com/bid/18775Exploit
- http://www.vupen.com/english/advisories/2006/2642
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27505
- http://secunia.com/advisories/20936Vendor Advisory
- http://www.acid-root.new.fr/advisories/news52.txtVendor Advisory
- http://www.securityfocus.com/archive/1/438859/100/0/threaded
- http://www.securityfocus.com/bid/18775Exploit
- http://www.vupen.com/english/advisories/2006/2642
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27505
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.