CVE-2006-0210

medium

Description

Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24112

http://www.vupen.com/english/advisories/2006/0175

http://www.securityfocus.com/archive/1/421740/100/0/threaded

http://www.osvdb.org/22377

http://www.interspire.com/forum/showthread.php?p=29606

http://secunia.com/advisories/18445

Details

Source: Mitre, NVD

Published: 2006-01-14

Updated: 2026-04-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N