VULNERABILITY INTELLIGENCE
CVE-2006-5900
CVSS score6.8 MEDIUM
EPSS probability1.27%
CISA KEVNot currently listed
Published2006-11-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.