CVE-2006-4660

Description

Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/28809

http://www.vupen.com/english/advisories/2006/3528

http://www.securityfocus.com/bid/19900

http://www.securityfocus.com/archive/1/445515/100/0/threaded

http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510

http://securityreason.com/securityalert/1523

http://secunia.com/advisories/21809

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS