Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-3258

Overview

Vulnerability Score 2.6 2.6
CVE Id CVE-2006-3258
Last Modified 07 Mar 2011 09:38:13
Published 27 Jun 2006 05:05:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity HIGH
Authentication NONE

CVE-2006-3258

Summary

Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters.

Vulnerable Systems

Application

  • Bnbt Easytracker 7.7 R3 2004-10-27

  • Bnbt Trinedit 7.7 R3 2004-10-27


References

VUPEN - ADV-2006-2506

SECUNIA - 20774

XF - bnbt-trinedit-index-xss(27302)

BID - 18617

SECTRACK - 1016368

MISC - http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html


Last Updated: 27 May 2016 10:42:57