CVE-2006-1854

Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a…

published April 19, 2006

CVSS
—
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field. NOTE: the vendor has disputed this vulnerability, saying that "it does not exist currently in the Bluepay 2.0 product," and older versions might not have been affected either. As of 20060512, CVE has not formally investigated this dispute

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00859 · 58.1th percentile
Published
2006-04-19T16:00Z
EPSS history
Timeline
  • 19 APR 16:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a…
    cvelistv5