VulnerabilityModified

CVE-2006-3769

Multiple cross-site scripting (XSS) vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pass and (2) pass2 parameters in (a) add.php or the (3) id parameter in (b) members/index.php.

LOW 2.6EPSS 1.86%

Does this matter?

Lower severity and a low EPSS score (1.86%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS: 1.86% probability · 78th percentile
CISA KEV: Not listed
Affected: top xl/top xl
Source: cve@mitre.org

References

http://secunia.com/advisories/21145Vendor Advisory
http://securityreason.com/securityalert/1267
http://securitytracker.com/id?1016548
http://www.majorsecurity.de/advisory/major_rls22.txtExploit, Vendor Advisory
http://www.osvdb.org/27413
http://www.osvdb.org/27414
http://www.securityfocus.com/archive/1/440652/100/0/threaded
http://www.securityfocus.com/archive/1/440889/100/100/threaded
http://www.securityfocus.com/bid/19098Exploit
http://www.vupen.com/english/advisories/2006/2914
https://exchange.xforce.ibmcloud.com/vulnerabilities/27880
http://secunia.com/advisories/21145Vendor Advisory
http://securityreason.com/securityalert/1267
http://securitytracker.com/id?1016548
http://www.majorsecurity.de/advisory/major_rls22.txtExploit, Vendor Advisory
http://www.osvdb.org/27413
http://www.osvdb.org/27414
http://www.securityfocus.com/archive/1/440652/100/0/threaded
http://www.securityfocus.com/archive/1/440889/100/100/threaded
http://www.securityfocus.com/bid/19098Exploit
http://www.vupen.com/english/advisories/2006/2914
https://exchange.xforce.ibmcloud.com/vulnerabilities/27880

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.