{"id":"CVE-2006-6401","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-6401","generatedAt":"2026-10-27T18:33:22.259Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) details parameter.","description":"Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) details parameter.","published":"2006-12-10T02:28:00.000Z","lastModified":"2026-06-16T22:33:04.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":["CWE-79"],"affected":["mystats/mystats"],"epss":{"score":0.01721,"percentile":0.77316,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.72%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://marc.info/?l=bugtraq&m=116344068502988&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22813","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1017210","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.osvdb.org/30319","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4468","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=116344068502988&w=2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22813","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017210","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/30319","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4468","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-6401","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}