PT-2006-2573 · Groupmax · Groupmax Desktop For Scheduler+3

Published 2006-04-01 · Updated 2017-07-20 · CVE-2006-1574

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Groupmax World Wide Web (affected versions not specified) Groupmax World Wide Web Desktop (affected versions not specified) Groupmax World Wide Web for Scheduler (affected versions not specified) Groupmax Desktop for Scheduler (affected versions not specified)

Description: A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through unknown attack vectors.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-1574

Affected Products

Groupmax Desktop For Scheduler

Groupmax World Wide Web

Groupmax World Wide Web Desktop

Groupmax World Wide Web For Scheduler

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-1574 · Security Note
• http://secunia.com/advisories/19483 · Vendor Advisory
• http://hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25574 · Note
• http://osvdb.org/24295 · Note
• http://vupen.com/english/advisories/2006/1180 · Note
• http://securityfocus.com/bid/17337 · Note