Unscored severity · published Feb 23, 2007
CVE-2006-7033
Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Super Link Exchange Script · Super Link Exchange Script
1.0 · source: NVD
Affected product
SL
Super Link Exchange Script
Super Link Exchange Script
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7033
securityreason.com
http://securityreason.com/securityalert/2285
www.securityfocus.com
http://www.securityfocus.com/archive/1/435166/30/4680/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/26721
More from Super Link Exchange Script
–
CVE-2006-7034
SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter
–
CVE-2006-7035
Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath…