CVE-2006-3004

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-13 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search.

Affected products

Scriptsez Ez Ringtone Manager: all versions

References

http://secunia.com/advisories/20530
http://securityreason.com/securityalert/1097
http://www.securityfocus.com/archive/1/436424
http://www.securityfocus.com/bid/18340
http://www.vupen.com/english/advisories/2006/2237
https://exchange.xforce.ibmcloud.com/vulnerabilities/27062
http://secunia.com/advisories/20530
http://securityreason.com/securityalert/1097
http://www.securityfocus.com/archive/1/436424
http://www.securityfocus.com/bid/18340
http://www.vupen.com/english/advisories/2006/2237
https://exchange.xforce.ibmcloud.com/vulnerabilities/27062

Get alerted when CVE-2006-3004 or the next vulnerability affects your stack