Vulnerability Details CVE-2006-5071
Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.4%
CVSS Severity
CVSS v2 Score 4.3
References
- http://eyeos.blogspot.com/2006/09/eyeos-091-released.html
- http://secunia.com/advisories/22117
- http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490
- http://www.securityfocus.com/bid/20213
- http://www.vupen.com/english/advisories/2006/3780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29190
- http://eyeos.blogspot.com/2006/09/eyeos-091-released.html
- http://secunia.com/advisories/22117
- http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490
- http://www.securityfocus.com/bid/20213
- http://www.vupen.com/english/advisories/2006/3780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29190
Products affected by CVE-2006-5071
-
cpe:2.3:o:eyeos_project:eyeos:*
-
cpe:2.3:o:eyeos_project:eyeos:0.8.10
-
cpe:2.3:o:eyeos_project:eyeos:0.8.3
-
cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2
-
cpe:2.3:o:eyeos_project:eyeos:0.8.4
-
cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1
-
cpe:2.3:o:eyeos_project:eyeos:0.8.5
-
cpe:2.3:o:eyeos_project:eyeos:0.8.9
-
cpe:2.3:o:eyeos_project:eyeos:0.9.0.1
-
cpe:2.3:o:eyeos_project:eyeos:0.9.0.2
-
cpe:2.3:o:eyeos_project:eyeos:0.9.0.3
-
cpe:2.3:o:eyeos_project:eyeos:0.9.0.4
-
cpe:2.3:o:eyeos_project:eyeos:0.9.0.5