Vulnerability Details CVE-2006-0136
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) comment_poster, (2) comment_poster_email, (3) comment_poster_homepage, and (4) comment_text parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.033
EPSS Ranking 86.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://evuln.com/vulns/7/exploit.html
- http://evuln.com/vulns/7/summary.html
- http://www.securityfocus.com/archive/1/420669/100/0/threaded
- http://www.securityfocus.com/bid/16113
- http://www.vupen.com/english/advisories/2006/0025
- http://evuln.com/vulns/7/exploit.html
- http://evuln.com/vulns/7/summary.html
- http://www.securityfocus.com/archive/1/420669/100/0/threaded
- http://www.securityfocus.com/bid/16113
- http://www.vupen.com/english/advisories/2006/0025
Products affected by CVE-2006-0136
-
cpe:2.3:a:phanatic_softwares:chimera_web_portal:0.2