cbcvebase.
CVE-2006-3810
published 2006-07-27

CVE-2006-3810: Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers…

PriorityP420medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.31%
87.1th percentile
Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianfirefox< firefox 1.5.dfsg+1.5.0.5-1 (sid)firefox 1.5.dfsg+1.5.0.5-1 (sid)
debianthunderbird< firefox 1.5.dfsg+1.5.0.5-1 (sid)firefox 1.5.dfsg+1.5.0.5-1 (sid)
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillaseamonkey
mozillaseamonkey
mozillaseamonkey
mozillathunderbird
mozillathunderbird
mozillathunderbird
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1
mozillathunderbird>= 0 < 1.5.0.5-11.5.0.5-1

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_ubuntu7.5HIGH
vendor_debian6.8HIGH
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.