Vulnerability Details CVE-2006-7189
Cross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1
- http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1
- http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1
- http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1
Products affected by CVE-2006-7189
-
cpe:2.3:a:web-app.net:webapp:0.9.9.6