CVE-2006-7143

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-07 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field.

Affected products

Call-Center-Software: through 0.93

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html
http://secunia.com/advisories/22365
http://securityreason.com/securityalert/2389
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt
http://www.securityfocus.com/archive/1/448423/100/0/threaded
http://www.securityfocus.com/bid/20474
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html
http://secunia.com/advisories/22365
http://securityreason.com/securityalert/2389
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt
http://www.securityfocus.com/archive/1/448423/100/0/threaded
http://www.securityfocus.com/bid/20474

Get alerted when CVE-2006-7143 or the next vulnerability affects your stack