Unscored CVE-2006-2810 EUVD-2006-2807GHSA-2mf4-h3g6-2vrm

Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or …

Published Jun 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php. NOTE: the card_id vector is already covered by CVE-2006-1230.

References

1034 third-party-advisory
vcard-multiple-xss(26838) vdb-entry
1016183 vdb-entry
20060527 multiple Xss exploits in : vCard 2.9 mailing-list
19216 third-party-advisory
571 third-party-advisory