CVE-2006-3769
Summary
| CVE | CVE-2006-3769 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-07-24 12:19:00 UTC |
| Updated | 2018-10-17 21:30:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pass and (2) pass2 parameters in (a) add.php or the (3) id parameter in (b) members/index.php. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Paddelberg Top XL Multiple Cross-Site Scripting Vulnerabilities | BID | www.securityfocus.com | Exploit |
| majorsecurity.de | MISC | www.majorsecurity.de | Exploit, Vendor Advisory |
| 27414 | OSVDB | www.osvdb.org | |
| 27413 | OSVDB | www.osvdb.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Top XL add.php Cross-Site Scripting Vulnerability - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| CXSecurity - IDS | SREASON | securityreason.com | |
| SecurityTracker.com Archives - Top XL Input Validation Holes Permit Cross-Site Scripting Attacks | SECTRACK | securitytracker.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.