NVD

Id
63833  
Name
CVE-2006-5227  
Description
Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2009-03-25  
Seq
2006-5227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332717 63833 CVE-2006-5227 1706  View
332718 63833 CVE-2006-5227 1017007  View
332719 63833 CVE-2006-5227 20061006 TorrentFlux User-Agent XSS Vulnerability  View
332720 63833 CVE-2006-5227 20371  View
332721 63833 CVE-2006-5227 http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/  View
332722 63833 CVE-2006-5227 torrentflux-admin-xss(29374)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61014 JVNDB-2006-003280 TorrentFlux の admin.php におけるクロスサイトスクリプティングの脆弱性 TorrentFlux の admin.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5227 21329 CVE-2006-5227 63833 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003280.html 2006-10-10 2012-12-20 View