PT-2006-4206 · Netsoft · Smartnet

Kil13R + 1 · Published 2006-06-29 · Updated 2024-02-14 · CVE-2006-3313

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Netsoft smartNet version 2.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter in the "search.jsp" file.

Recommendations For Netsoft smartNet version 2.0, consider restricting access to the search.jsp file or validating and sanitizing the keyWord parameter to prevent injection of malicious scripts.

Exploit

Fix

Related Identifiers

CVE-2006-3313

Affected Products

Smartnet

References · 8

• 🔥 http://securitytracker.com/id?1016367 · Exploit
• 🔥 http://kil13r.info/sa/Kil13r-SA-20060622-1.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3313 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27411 · Note
• http://securityfocus.com/archive/1/438164/100/0/threaded · Note
• http://securityreason.com/securityalert/1168 · Note
• http://kil13r.info/sa/xss/smartnetxss.jpg · Note
• http://securityfocus.com/bid/18600 · Note