CVE-2006-4376
Multiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) profil_nr and (2) sprache parameters…
Does this matter?
Lower severity and a low EPSS score (1.26%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) profil_nr and (2) sprache parameters in the main portion of the portal, the (3) suchstring field in suchForm in the main portion of the portal, the (4) GaleryKey and (5) Breadcrumbs parameters in the gallerie module, and the (6) GGBNSaction parameter in the ggbns module.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 1.26% probability · 68th percentile
- CISA KEV
- Not listed
- Affected
- guder und koch netzwerktechnik/eichhorn portal
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/1458
- http://www.securityfocus.com/archive/1/444065/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28533
- http://securityreason.com/securityalert/1458
- http://www.securityfocus.com/archive/1/444065/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28533
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.