Unrated severityNVD Advisory· Published Jun 13, 2006· Updated Jun 16, 2026

CVE-2006-3004

Description

Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search.

Affected products

Scriptsez/Ez Ringtone Manager
cpe:2.3:a:scriptsez:ez_ringtone_manager:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

secunia.com/advisories/20530nvdExploit
www.securityfocus.com/archive/1/436424nvdExploit
securityreason.com/securityalert/1097nvd
www.securityfocus.com/bid/18340nvd
www.vupen.com/english/advisories/2006/2237nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27062nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000