CVE-2006-4608

Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cadena parameter in busqueda.php and the (2) email parameter in lista.php.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.97% chance of exploitation in the next 30 days, 92nd percentile

Published

2006-09-07

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8425

Security advisories

• http://secunia.com/advisories/21738
• http://www.securityfocus.com/bid/19818

References

• CVE Record
• NVD entry