CyberSec.Space Logo
Back to CVE Browser

CVE-2006-2664

MEDIUM
5.8
CVSS Severity Score
EPSS Score0.1100%
EPSS Percentile39.38th
PublishedMay 30, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes.

Affected Platforms (CPE)

📦
Ifdate.com

Ifdate

= 1.2

References & Advisories

🔗 http://secunia.com/advisories/20287
🔗 http://securityreason.com/securityalert/991
🔗 http://www.osvdb.org/25778
🔗 http://www.securityfocus.com/archive/1/435010/100/0/threaded
🔗 http://www.securityfocus.com/bid/18102
🔗 http://www.vupen.com/english/advisories/2006/1987
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/26678
🔗 http://secunia.com/advisories/20287

Related Vulnerabilities

CVE-2007-271310.0

ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote ...

CVE-2008-71146.8

SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute ...

CVE-2006-607610.0

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier ...

CVE-2006-502510.0

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack ve...