Vulnerability Details CVE-2006-3766
Darren's $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a txtrating parameter with a score greater than the intended maximum of 10.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://securitytracker.com/id?1016700
- http://www.securityfocus.com/archive/1/440490/100/0/threaded
- http://www.securityfocus.com/archive/1/440592/100/0/threaded
- http://www.securityfocus.com/archive/1/443198/100/200/threaded
- http://securitytracker.com/id?1016700
- http://www.securityfocus.com/archive/1/440490/100/0/threaded
- http://www.securityfocus.com/archive/1/440592/100/0/threaded
- http://www.securityfocus.com/archive/1/443198/100/200/threaded
Products affected by CVE-2006-3766
-
cpe:2.3:a:darrens_5-dollar_script_archive:osdate:*
-
cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.5
-
cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.6