← Voltar para CVEs
CVE-2006-3247
N/ADescricao
Multiple cross-site scripting (XSS) vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) page, and (3) action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado6/27/2006
Ultima modificacao4/16/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
gl-sh:deaf_forum
Referencias
http://secunia.com/advisories/20781(cve@mitre.org)
http://www.osvdb.org/26804(cve@mitre.org)
http://www.securityfocus.com/bid/18651(cve@mitre.org)
http://www.vupen.com/english/advisories/2006/2515(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/27363(cve@mitre.org)
http://pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/20781(af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/26804(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/18651(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/2515(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/27363(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.