CVE-2006-3006

Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script…

published June 13, 2006

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03885 · 90.2th percentile
Published
2006-06-13T10:00Z
EPSS history
Timeline
  • 13 JUN 10:00Z
    Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script…
    cvelistv5