CVE-2006-2664

medium

Description

Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26678

http://www.vupen.com/english/advisories/2006/1987

http://www.securityfocus.com/bid/18102

http://www.securityfocus.com/archive/1/435010/100/0/threaded

http://www.osvdb.org/25778

http://securityreason.com/securityalert/991

http://secunia.com/advisories/20287

Details

Source: Mitre, NVD

Published: 2006-05-30

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N