‹ Back to list

CVE-2006-3129

Status: ModifiedMedium (4.3)—
Severity4.3Medium · CVSS 2.0
Exploitation probability1.30 %higher than 70% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found

Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) view parameters.

CVSS

Base score
4.3
Version
2.0
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
1.30 %
Percentile among all scored CVEs
70
Score date
10/22/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

NC Linklist — NC Linklist

CWEs

References

Show 12 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2006-3129",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-06-22T01:02:00.000",
  "references": [
    {
      "url": "http://pridels0.blogspot.com/2006/06/nc-linklist-xss-vuln.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/20691",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/26675",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/18546",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2438",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27248",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://pridels0.blogspot.com/2006/06/nc-linklist-xss-vuln.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20691",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/26675",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/18546",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2438",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27248",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) view parameters."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en NC LinkList, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1)cat  y (2)view .\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:26:27.687",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nc_linklist:nc_linklist:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D65E3943-93B3-4F73-81A3-0174BFD559D5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}