CVEvulnerability
CVE-2006-3004
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search.
Affected configurations
• scriptsez ez ringtone manager
References
- http://secunia.com/advisories/20530 Exploit
- http://securityreason.com/securityalert/1097 securityreason.com
- http://www.securityfocus.com/archive/1/436424 Exploit
- http://www.securityfocus.com/bid/18340 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2237 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27062 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20530 Exploit
- http://securityreason.com/securityalert/1097 securityreason.com
- http://www.securityfocus.com/archive/1/436424 Exploit
- http://www.securityfocus.com/bid/18340 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2237 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27062 exchange.xforce.ibmcloud.com