Vulnerabilities > CVE-2006-4577 - Remote vulnerability in the Address Book the Address Book 1.04E

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
the-address-book
NVD
Published: 2006-12-31
Updated: 2017-07-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) email, (2) websites, and (3) groupAddName parameters in (a) save.php; the (4) errorMsg parameter in (b) index.php; and the (5) goTo and (6) search parameters in (c) search.php.

Vulnerable Configurations

Part Description Count
Application
The_Address_Book
1

References