ID CVE-2006-2564
Summary Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog, (2) posting a listing, (3) posting an event, (4) adding comments, or (5) sending a message.
References
Vulnerable Configurations
  • cpe:2.3:a:alstrasoft:e-friends:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:alstrasoft:e-friends:4.0:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 18-10-2018 - 16:40)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 18079
bugtraq 20060522 AlstraSoft E-Friends - XSS
secunia 20229
sreason 954
vupen ADV-2006-1944
xf alstrasoft-efriends-index-xss(26650)
Last major update 18-10-2018 - 16:40
Published 24-05-2006 - 20:02
Last modified 18-10-2018 - 16:40
Back to Top