SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2006-1850

LOW · CVSS 2.6 EPSS 1.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-04-19 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.6. It may be remotely exploitable.

CVE
CVE-2006-1850
Severity
LOW
CVSS
2.6
EPSS
1.77%

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level, (2) position, (3) id, and (4) action parameters to members_only/index.cgi, and the (5) page parameter to customer_area/index.cgi.