| ID |
CVE-2006-2167
|
| Summary |
Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 4.3 (as of 18-10-2018 - 16:38) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
| refmap
via4
|
| bid | 17783 | | bugtraq | 20060502 SF-Users V1.0 XSS injection | | secunia | 19932 | | sreason | 831 | | vupen | ADV-2006-1637 | | xf | sfusers-register-xss(26215) |
|
| Last major update |
18-10-2018 - 16:38 |
| Published |
04-05-2006 - 12:38 |
| Last modified |
18-10-2018 - 16:38 |
