CVE-2006-5071

Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2006-09-28

Last modified

2024-08-07

Affected products

• Eyeos (Eyeos Project)

References

• http://eyeos.blogspot.com/2006/09/eyeos-091-released.html
• http://secunia.com/advisories/22117
• http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490
• http://www.securityfocus.com/bid/20213
• http://www.vupen.com/english/advisories/2006/3780
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29190