Unscored severity · published Nov 20, 2006
CVE-2006-5985
Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) bg1, (2) bg2, (3) text, or (4) size parameters. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
Extreme Cms · Extreme Cms
through 0.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5985
Vendor Advisory
http://secunia.com/advisories/22919
www.vupen.com
http://www.vupen.com/english/advisories/2006/4529
More from Extreme Cms
–
CVE-2006-5986
admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities