Vulnerability Details CVE-2006-3033
Cross-site scripting (XSS) vulnerability in MyScrapbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input box in singlepage.php when submitting scrapbook pages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 65.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/20599
- http://www.osvdb.org/26413
- http://www.securityfocus.com/archive/1/436792/100/0/threaded
- http://www.securityfocus.com/bid/18398
- http://secunia.com/advisories/20599
- http://www.osvdb.org/26413
- http://www.securityfocus.com/archive/1/436792/100/0/threaded
- http://www.securityfocus.com/bid/18398
Products affected by CVE-2006-3033
-
cpe:2.3:a:myscrapbook:myscrapbook:3.1