CVE-2006-1496

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25483

http://www.attrition.org/pipermail/vim/2006-March/000651.html

http://www.attrition.org/pipermail/vim/2006-March/000650.html

http://secunia.com/advisories/19403

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS