CVE-2006-3060

2006-06-1910:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read parameter in index.php, (2) farea parameter in faq.php, and (3) unspecified input fields on the “My Account” login page.

References

secunia.com/advisories/20601

securityreason.com/securityalert/1108

www.securityfocus.com/archive/1/436650/100/0/threaded

www.vupen.com/english/advisories/2006/2304

exchange.xforce.ibmcloud.com/vulnerabilities/27157