6.8
CVSSv2

CVE-2006-3183

Published: 23/06/2006 Updated: 20/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the (1) browse parameter, which is not filtered in the resulting error message, and multiple unspecified input fields, including those involved when (2) updating a profile, (3) posting comments or entries in a blog, (4) uploading files, (5) picture captions, and (6) sending a private message (PM).

Vulnerable Product Search on Vulmon Subscribe to Product

mobescripts mobile space community 2.0