Unscored severity · published Jul 6, 2006
CVE-2006-3382
Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string"
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string".
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mads · Mads
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3382
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3382
Vendor Advisory
http://secunia.com/advisories/20932
securityreason.com
http://securityreason.com/securityalert/1189
www.securityfocus.com
http://www.securityfocus.com/archive/1/438869/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/18761
www.vupen.com
http://www.vupen.com/english/advisories/2006/2641
Exploit
http://www.youfucktard.com/blog/2006/06/30/mads-v10/
More from Mads
–
CVE-2006-3383
Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover within a…