CVE-2006-3230

Published: Jun 27, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected (3)

Products: Azureus Tracker: Azureus Tracker

Azureus Tracker

1 product

Azureus Tracker

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Azureus Tracker Azureus Tracker	Version 2.2.0.2
Azureus Tracker Azureus Tracker	Version 2.3.0.6
Azureus Tracker Azureus Tracker	Version 2.4.0.2

References (14)

http://pridels0.blogspot.com/2006/06/azureus-2402-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/20755

Source: cve@mitre.org

ExploitVendor Advisory

http://securitytracker.com/id?1016357

Source: cve@mitre.org

http://www.osvdb.org/26768

Source: cve@mitre.org

http://www.securityfocus.com/bid/18596

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2484

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27300

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/azureus-2402-xss-vuln.html