CVE-2006-1144

Description

Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25105

http://www.vupen.com/english/advisories/2006/0886

http://www.securityfocus.com/bid/17025

http://www.securityfocus.com/archive/1/426931/100/0/threaded

http://www.osvdb.org/23758

http://www.osvdb.org/23757

http://secunia.com/advisories/19155

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS