Vulnerability Details CVE-2006-0172
Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.0%
CVSS Severity
CVSS v2 Score 3.5
References
- http://secunia.com/advisories/18411
- http://www.securenetwork.it/advisories/sn-2006-01.html
- http://www.securityfocus.com/archive/1/421392/100/0/threaded
- http://www.securityfocus.com/bid/16195
- http://www.vupen.com/english/advisories/2006/0145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24067
- http://secunia.com/advisories/18411
- http://www.securenetwork.it/advisories/sn-2006-01.html
- http://www.securityfocus.com/archive/1/421392/100/0/threaded
- http://www.securityfocus.com/bid/16195
- http://www.vupen.com/english/advisories/2006/0145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24067
Products affected by CVE-2006-0172
-
cpe:2.3:a:hummingbird:enterprise_collaboration:-
-
cpe:2.3:a:hummingbird:enterprise_collaboration:5.2
-
cpe:2.3:a:hummingbird:enterprise_collaboration:5.21