Unscored CVE-2006-2117 EUVD-2006-2118GHSA-mm4g-qrpv-xjp8

Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page.

Published May 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page.

References

http://www.aria-security.net/portals/thyme
ADV-2006-1602 vdb-entry
822 third-party-advisory
19909 third-party-advisory
17746 vdb-entry
20060429 Thyme 1.3 Cross Site Scripting mailing-list
20060908 Vendor ACK for CVE-2006-2117 (Thyme) mailing-list
thyme-index-xss(26188) vdb-entry