Vulnerabilities > CVE-2006-0643 - HTML Injection vulnerability in Wiredred E POP web Conferencing 4.1.0.755

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
wiredred
NVD
Published: 2006-02-10
Updated: 2018-10-19

Summary

Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users to inject arbitrary web script or HTML via the topic name of a conference.

Vulnerable Configurations

Part Description Count
Application
Wiredred
1

References