Vulnerabilities > CVE-2006-2874 - HTML Injection vulnerability in Osads Alliance Database Osads Alliance Database 1.1/1.2/1.3
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
osads-alliance-database
Summary
Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock in HTML-Code," possibly due to a cross-site scripting (XSS) vulnerability involving comments.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |