CVE-2006-4211

Published: Aug 17, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (1)

Products: B0zz And Chris Vincent: Owl Intranet Engine

B0zz And Chris Vincent

1 product

Owl Intranet Engine

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
B0zz And Chris Vincent Owl Intranet Engine	version ≤ 0.90

References (12)

http://jvn.jp/jp/JVN%2301137722/index.html

Source: cve@mitre.org

http://secunia.com/advisories/21519

Source: cve@mitre.org

PatchVendor Advisory

http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444

Source: cve@mitre.org

http://www.securityfocus.com/bid/19552

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3285

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28403

Source: cve@mitre.org

http://jvn.jp/jp/JVN%2301137722/index.html