{"api_version":"1","generated_at":"2026-07-23T09:57:16+00:00","cve":"CVE-2006-3258","urls":{"html":"https://cve.report/CVE-2006-3258","api":"https://cve.report/api/cve/CVE-2006-3258.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3258","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3258"},"summary":{"title":"CVE-2006-3258","description":"Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-06-27 21:05:00","updated_at":"2017-07-20 01:32:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://www.vupen.com/english/advisories/2006/2506","name":"ADV-2006-2506","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/20774","name":"20774","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - BNBT EasyTracker Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27302","name":"bnbt-trinedit-index-xss(27302)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html","name":"http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html","refsource":"MISC","tags":[],"title":"- UNSECURED SYSTEMS -: BNBT TrinEdit vuln.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/18617","name":"18617","refsource":"BID","tags":[],"title":"BNBT EasyTracker Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1016368","name":"1016368","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - BNBT Input Validation Hole in 'filter' and 'sort' Parameters Permits Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3258","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3258","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3258","vulnerable":"1","versionEndIncluding":"7.7_r3_2004-10-27","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bnbt","cpe5":"easytracker","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3258","vulnerable":"1","versionEndIncluding":"7.7_r3_2004-10-27","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bnbt","cpe5":"trinedit","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3258","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html","refsource":"MISC","url":"http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html"},{"name":"20774","refsource":"SECUNIA","url":"http://secunia.com/advisories/20774"},{"name":"1016368","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016368"},{"name":"bnbt-trinedit-index-xss(27302)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27302"},{"name":"18617","refsource":"BID","url":"http://www.securityfocus.com/bid/18617"},{"name":"ADV-2006-2506","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/2506"}]}},"nvd":{"publishedDate":"2006-06-27 21:05:00","lastModifiedDate":"2017-07-20 01:32:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"severity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:bnbt:easytracker:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7_r3_2004-10-27","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:bnbt:trinedit:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7_r3_2004-10-27","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3258","Ordinal":"18583","Title":"CVE-2006-3258","CVE":"CVE-2006-3258","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3258","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3258","Ordinal":"2","NoteData":"2006-06-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3258","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}