Unscored severity · published Mar 13, 2006
CVE-2006-0820
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DH
Dwarf Http Server · Gnome
1.3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0820
Patch
http://secunia.com/advisories/18962
Patch
http://secunia.com/secunia_research/2006-13/advisory
securitytracker.com
http://securitytracker.com/id?1015779
www.osvdb.org
http://www.osvdb.org/23837
www.securityfocus.com
http://www.securityfocus.com/archive/1/427478/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17123
More from Dwarf Http Server
–
CVE-2006-0819
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an…