CVE-2006-7073

medium

Description

Cross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows remote attackers to inject arbitrary web script or HTML in Internet Explorer via unknown vectors related to the uploaded attachments form. NOTE: some details were obtained from third party information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/28788

http://www.vupen.com/english/advisories/2006/3499

http://www.securityfocus.com/bid/19888

http://sourceforge.net/project/shownotes.php?group_id=66311&release_id=445469

http://secunia.com/advisories/21787

Details

Source: Mitre, NVD

Published: 2007-03-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.00329