Vulnerability Details CVE-2006-6675
Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.9%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/23406
- http://www.securityfocus.com/bid/21678
- http://www.vupen.com/english/advisories/2006/5090
- https://secure-support.novell.com/KanisaPlatform/Publishing/514/3319127_f.SAL_Public.html
- http://secunia.com/advisories/23406
- http://www.securityfocus.com/bid/21678
- http://www.vupen.com/english/advisories/2006/5090
- https://secure-support.novell.com/KanisaPlatform/Publishing/514/3319127_f.SAL_Public.html
Products affected by CVE-2006-6675
-
cpe:2.3:a:novell:apache_http_server:2.0.48
-
cpe:2.3:o:novell:netware:6.5