CVE-2006-0938 - Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the RefererURL parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the RefererURL parameter

Published Mar 1, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.28%

Description

Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the RefererURL parameter.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://securitytracker.com/id?1015683
vdb-entryx_refsource_SECTRACK
http://www.nukedx.com/?viewdoc=16
x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/426076/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16817
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0941
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24956
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securitytracker.com/id?1015683		vdb-entryx_refsource_SECTRACK
http://www.nukedx.com/?viewdoc=16		x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/426076/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16817		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0941		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24956		vdb-entryx_refsource_XF