NVD

Id
62008  
Name
CVE-2006-3330  
Description
Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-30  
Modified Date
2011-03-07  
Seq
2006-3330  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321018 62008 CVE-2006-3330 1179  View
321019 62008 CVE-2006-3330 1016407  View
321020 62008 CVE-2006-3330 20060628 PHPClassifieds General  View
321021 62008 CVE-2006-3330 18713  View
321022 62008 CVE-2006-3330 18717  View
321023 62008 CVE-2006-3330 ADV-2006-2589  View
321024 62008 CVE-2006-3330 phpclassifieds-postingad-xss(27454)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61785 JVNDB-2006-004051 PHP/MySQL Classifieds におけるクロスサイトスクリプティングの脆弱性 PHP/MySQL Classifieds (PHP Classifieds) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3330 19432 CVE-2006-3330 62008 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-004051.html 2006-06-30 2014-03-11 View