CVE-2006-2141 - Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument

Published May 2, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 3.82%

Description

Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://pridels0.blogspot.com/2006/04/cps-340-xss.html
x_refsource_MISC
http://secunia.com/advisories/19879
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.osvdb.org/25144
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17774
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1589
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2142
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26155
vdb-entryx_refsource_XF

Link	Providers	Tags
http://pridels0.blogspot.com/2006/04/cps-340-xss.html		x_refsource_MISC
http://secunia.com/advisories/19879		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.osvdb.org/25144		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17774		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1589		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2142		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26155		vdb-entryx_refsource_XF