CVE-2006-0084: Rasmp

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $_SERVER[HTTP_USER_AGENT] variable (User-Agent header).

Affected products

• Rasmp Rasmp: version 2.0.0 only

Published 2006-01-05. Last modified 2026-06-16.