{
    "id": "CVE-2006-4747",
    "published": "2006-09-13 22:07:00",
    "last_modified": "2026-06-16 22:29:43",
    "cvss_score": "4.3",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "cwe": null,
    "description": "Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php.",
    "epss_score": "0.01703",
    "epss_percentile": "0.76564",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-09 18:17:06",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "idevspot",
            "product": "textads"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "28502",
            "title": "TextAds - 'delete.php?id' Cross-Site Scripting",
            "date": "2006-09-09",
            "url": "https://www.exploit-db.com/exploits/28502"
        },
        {
            "source": "exploit-db",
            "ref_id": "28503",
            "title": "TextAds - 'error.php?error' Cross-Site Scripting",
            "date": "2006-09-09",
            "url": "https://www.exploit-db.com/exploits/28503"
        }
    ],
    "refs_list": [
        "http://securityreason.com/securityalert/1567",
        "http://www.securityfocus.com/archive/1/445745/100/0/threaded",
        "http://www.securityfocus.com/bid/19932",
        "http://securityreason.com/securityalert/1567",
        "http://www.securityfocus.com/archive/1/445745/100/0/threaded",
        "http://www.securityfocus.com/bid/19932"
    ]
}