Beveiligingsadvies

CVE-2006-2618

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-05-26 01:00:00

Laatst bijgewerkt 2024-08-07 17:58:51

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗