Unscored severity · published Nov 4, 2006
CVE-2006-5717
Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) basedemo.php and (2) calenderdemo.php in samples/, and other unspecified files.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZG
Zend Google Data Client Library Preview · Zend
0.2.0 · source: NVD
Affected product
ZG
Zend Google Data Client Library Preview
Zend
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5717
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5717
securityreason.com
http://securityreason.com/securityalert/1815
www.armorize.com
http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0008
www.securityfocus.com
http://www.securityfocus.com/archive/1/450245/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20851