Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) input fields of the contact form.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Easy Cms | Easy Cms | All versions |
References
- http://secunia.com/advisories/18673Vendor Advisory
- http://www.securityfocus.com/archive/1/423442/100/0/threaded
- http://www.securityfocus.com/archive/1/423563/100/0/threaded
- http://www.securityfocus.com/archive/1/424431/100/0/threaded
- http://www.securityfocus.com/bid/16430
- http://www.vupen.com/english/advisories/2006/0385
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24371
- http://secunia.com/advisories/18673Vendor Advisory
- http://www.securityfocus.com/archive/1/423442/100/0/threaded
- http://www.securityfocus.com/archive/1/423563/100/0/threaded
- http://www.securityfocus.com/archive/1/424431/100/0/threaded
- http://www.securityfocus.com/bid/16430
- http://www.vupen.com/english/advisories/2006/0385
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24371
FAQ
What is CVE-2006-0507?
CVE-2006-0507 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) inp...
How severe is CVE-2006-0507?
CVE-2006-0507 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-0507?
Check the references section above for vendor advisories and patch information. Affected products include: Easy Cms Easy Cms.