6.8
CVSSv2

CVE-2006-6777

Published: 28/12/2006 Updated: 17/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote malicious users to inject arbitrary web script or HTML via the categoryId parameter in a Portal.ShowPage action.

Vulnerable Product Search on Vulmon Subscribe to Product

future internet future internet

Exploits

source: wwwsecurityfocuscom/bid/21727/info Future Internet is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the ...