CVE-2006-6984

MITTEL 5.0CVE-2006-6984 · Published 09/02/2007 · updated 16/06/2026

Kurz gesagt

CVE-2006-6984 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in greenbrowser (more quick tools).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 67.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
greenbrowser more_quick_tools	`= 3.4.0622`	No fix yet

Description

Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.

References

pridels0.blogspot.com/2006/06/multiple-browsers-information.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free