CVE-2006-6249 Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 6.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chama cargo | <= 4.36 | No fix listed |
References
- JVN#08494205 third-party-advisory
- 23149 patch third-party-advisory vendor-advisory
- www.ipa.go.jp
- 21361 patch vdb-entry
- ADV-2006-4780 vdb-entry
- chamacargo-unspecified-xss(30622) vdb-entry