Back to Database
Status published
Medium
CVE-2006-5071
Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5071
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/22117
- http://www.securityfocus.com/bid/20213
- http://eyeos.blogspot.com/2006/09/eyeos-091-released.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29190
- http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490
- http://www.vupen.com/english/advisories/2006/3780
More from eyeos project
View All →CVE-2007-4609
eyeOS uses predictable checksum values in the checknum parameter for...
Medium
6.4
CVE-2006-0636
desktop.php in eyeOS 0.8.9 and earlier tests for the existence...
High
7.5
CVE-2005-3414
eyeOS 0.8.4 stores usrinfo.xml under the web document root with...
High
7.5
CVE-2005-3413
Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows...
Medium
4.3
Affected Vendor
eyeos project
View all reports →Affected Software
eyeos
Vulnerable Versions:
0, 0.8.3, 0.8.3_r2, 0.8.4, 0.8.4_r1, 0.8.5, 0.8.9, 0.8.10, 0.9.0.1, 0.9.0.2, 0.9.0.3, 0.9.0.4, 0.9.0.5
Timeline
Official Publish:
September 28th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.