Vulnerability Details CVE-2006-2991
Multiple cross-site scripting (XSS) vulnerabilities in Ringlink 3.2 allow remote attackers to inject arbitrary web script or HTML via a JavaScript URI in the SRC attribute of an IMG element, and possibly other manipulations, in the ringid parameter in (1) next.cgi, (2) stats.cgi, or (3) list.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.4%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/20590
- http://securityreason.com/securityalert/1082
- http://www.osvdb.org/26318
- http://www.osvdb.org/26319
- http://www.osvdb.org/26320
- http://www.securityfocus.com/archive/1/436690/100/0/threaded
- http://www.securityfocus.com/bid/18360
- http://www.vupen.com/english/advisories/2006/2281
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27053
- http://secunia.com/advisories/20590
- http://securityreason.com/securityalert/1082
- http://www.osvdb.org/26318
- http://www.osvdb.org/26319
- http://www.osvdb.org/26320
- http://www.securityfocus.com/archive/1/436690/100/0/threaded
- http://www.securityfocus.com/bid/18360
- http://www.vupen.com/english/advisories/2006/2281
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27053