CVE-2006-3923

BASSO 2.6CVE-2006-3923 · Published 28/07/2006 · updated 16/06/2026

In breve

CVE-2006-3923 è una vulnerabilità BASSO (CVSS 2.6) che riguarda fire-mouse toplist (fire-mouse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
fire-mouse toplist fire-mouse	`≤ 1.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Seitenname parameter.

References

secunia.com/advisories/21173 · Vendor Advisory
securityreason.com/securityalert/1299
majorsecurity.de/advisory/major_rls24.txt · Exploit
securityfocus.com/archive/1/440859/100/100/threaded
securityfocus.com/bid/19120
vupen.com/english/advisories/2006/2962
exchange.xforce.ibmcloud.com/vulnerabilities/27912

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free