CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-2664

MEDIUM
5.8
CVSS Severity Score
EPSS Score0.1100%
EPSS Percentile39.38th
Published2006年5月30日
Last Modified2026年4月16日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes.

Affected Platforms (CPE)

📦
Ifdate.com

Ifdate

= 1.2

References & Advisories

🔗 http://secunia.com/advisories/20287
🔗 http://securityreason.com/securityalert/991
🔗 http://www.osvdb.org/25778
🔗 http://www.securityfocus.com/archive/1/435010/100/0/threaded
🔗 http://www.securityfocus.com/bid/18102
🔗 http://www.vupen.com/english/advisories/2006/1987
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/26678
🔗 http://secunia.com/advisories/20287

関連する脆弱性情報

CVE-2007-271310.0

ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote ...

CVE-2008-71146.8

SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute ...

CVE-2006-607610.0

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier ...

CVE-2006-623510.0

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to ...