Unscored severity · published Jan 13, 2007
CVE-2006-6928
Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) listmain.asp or…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) listmain.asp or (b) searchmain.asp, the (2) the Keyword parameter to (c) searchkey.asp, or the (3) refno parameter to (d) forminfo.asp.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RI
Rialto · Grandora
1.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6928
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6928
Vendor Advisory
http://secunia.com/advisories/23049
securityreason.com
http://securityreason.com/securityalert/2143
www.securityfocus.com
http://www.securityfocus.com/archive/1/452112/100/0/threaded
Exploit
http://www.securityfocus.com/bid/21191
www.vupen.com
http://www.vupen.com/english/advisories/2006/4630
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30425
More from Rialto
–
CVE-2006-6927
Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the uname (username) and (2) pword (passwd) fields in (a)…