Unscored severity · published Jan 14, 2006
CVE-2006-0210
Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username…
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TN
Trackpoint NX · Interspire
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0210
secunia.com
http://secunia.com/advisories/18445
www.interspire.com
http://www.interspire.com/forum/showthread.php?p=29606
www.osvdb.org
http://www.osvdb.org/22377
www.securityfocus.com
http://www.securityfocus.com/archive/1/421740/100/0/threaded
Exploit
http://www.securityfocus.com/bid/16214
www.vupen.com
http://www.vupen.com/english/advisories/2006/0175