PT-2006-5930 · Wheatblog · Wheatblog

Publicado 2006-10-06 · Atualizado 2008-09-05 · CVE-2006-5195

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wheatblog versions 1.0 through 1.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to cross-site scripting (XSS) attacks. The estimated number of potentially affected devices and details about real-world incidents are not available.

Recommendations For Wheatblog versions 1.0 and 1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5195

Produtos afetados

Wheatblog

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-5195 · Nota de Segurança
• http://securityfocus.com/bid/20306 · Nota