Vulnerabilities > CVE-2006-4327 - Cross-Site Scripting vulnerability in Cloudnine Interactive Links Manager 20060612

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, or (3) keywords parameters.

Vulnerable Configurations

Part Description Count
Application
Cloudnine_Interactive
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/49995/EV0136.txt
idPACKETSTORM:49995
last seen2016-12-05
published2006-09-14
reporterAliaksandr Hartsuyeu
sourcehttps://packetstormsecurity.com/files/49995/EV0136.txt.html
titleEV0136.txt