VulnerabilityModified
CVE-2006-6768
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.
MEDIUM 6.8EPSS 1.75%
Does this matter?
Lower severity and a low EPSS score (1.75%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.75% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- pwp technologies/the classified ad system
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23289
- http://securityreason.com/securityalert/2075
- http://www.securityfocus.com/archive/1/452194/100/200/threaded
- http://www.securityfocus.com/bid/21198
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30445
- http://secunia.com/advisories/23289
- http://securityreason.com/securityalert/2075
- http://www.securityfocus.com/archive/1/452194/100/200/threaded
- http://www.securityfocus.com/bid/21198
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30445
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.