CVE-2006-5168 - Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string

Published Oct 4, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.16%

Description

Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://securityreason.com/securityalert/1689
third-party-advisoryx_refsource_SREASON
http://svn.sourceforge.net/viewvc/pebble/trunk/src/net/sourceforge/pebble/search/SearchResults.java?r1=136&r2=206
x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/447503/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20298
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5153
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29312
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/1689		third-party-advisoryx_refsource_SREASON
http://svn.sourceforge.net/viewvc/pebble/trunk/src/net/sourceforge/pebble/search/SearchResults.java?r1=136&r2=206		x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/447503/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20298		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5153		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29312		vdb-entryx_refsource_XF