CVE-2006-6587

2006-12-1519:00:00

mitre

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

Cross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) allows remote attackers to inject arbitrary web script or HTML by posting a message.

References

archives.neohapsis.com/archives/fulldisclosure/2006-12/0177.html

securitytracker.com/id?1017360

www.securityfocus.com/bid/21529

issues.apache.org/jira/browse/OFBIZ-178

issues.apache.org/jira/browse/OFBIZ-260