| |
Vulnerability CVE-2006-6987
Published: 2007-02-08 Modified: 2012-02-12
Description: |
Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. |
CVSS2 => (AV:N/AC:L/Au:N/C:C/I:N/A:N)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
7.8/10 |
6.9/10 |
10/10 |
Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
Confidentiality impact |
Integrity impact |
Availability impact |
Complete |
None |
None |
References: |
http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
|
|
|
closedb();
?>
Copyright 2024, cxsecurity.com
|
|
|