« Volver al listado

CVE-2006-3052

Estado: ModificadaMedia (6.8)—

Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the (1) event_id parameter to view-event-details.php or (2) select_events parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Cescripts — Event Registration 2checkoutCescripts — Event Registration CorporateCescripts — Event Registration PaypalCescripts — Event Registration Rsvp

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-3052",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-06-16T10:02:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/20640",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/26490",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/26491",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2345",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/20640",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/26490",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/26491",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2345",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the (1) event_id parameter to view-event-details.php or (2) select_events parameter to event-registration.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución de comandos en sitios cruzados (Cross-site scripting (XSS)) en el Registro de Eventos (Event Registration) que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) event_id para ver-evento-details.php o (2) el parámetro select_events para evento-registration.php. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:26:18.183",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cescripts:event_registration_2checkout:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80B5C80B-A01C-4751-BE63-2E0E6E03C408"
            },
            {
              "criteria": "cpe:2.3:a:cescripts:event_registration_corporate:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "490F2820-AD52-4455-B0D9-ACC0AE3EC991"
            },
            {
              "criteria": "cpe:2.3:a:cescripts:event_registration_paypal:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "775FB1E4-5935-4A6C-B8D6-9639DF315E6C"
            },
            {
              "criteria": "cpe:2.3:a:cescripts:event_registration_rsvp:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BA96B86-D2D8-402D-87F0-B7FCA0F58059"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}