CVE-2006-3613 in Ezwaiter Online信息

摘要

由 VulDB • 2026-07-06

Chamberland Technology ezWaiter 3.0 Online e la relativa Enterprise Software (nota anche come edizione enterprise) presentano più vulnerabilità cross-site scripting (XSS). Attaccanti remoti possono iniettare script web o HTML arbitrari tramite i parametri (1) itemfor (noto anche come "Who is this item for?") e (2) special (noto anche come "Special Instructions") inviati a item.php, accessibile da showorder.php, oppure tramite (3) parametri non specificati nel modulo di accesso presente in login.php.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2006-07-14

披露

2006-07-18

管理

已接受

条目

VDB-31339

CPE

准备好

CWE

CWE-80 (已确认)

CVSS

5.4 (VulDB)

EPSS

0.01146

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2006-3613
NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3613
CVE Details	https://www.cvedetails.com/cve/CVE-2006-3613/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!