CVE-2006-3555

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by…

published July 13, 2006

CVSS
—
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01342 · 71.0th percentile
Published
2006-07-13T00:00Z
EPSS history
Timeline
  • 13 JUL 00:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by…
    cvelistv5