CVE-2006-1544

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25530

http://www.vupen.com/english/advisories/2006/1173

http://www.securityfocus.com/bid/17317

http://www.securityfocus.com/archive/1/430674/100/0/threaded

http://www.osvdb.org/24275

http://www.evuln.com/vulns/112

http://secunia.com/advisories/19435

Details

Source: Mitre, NVD

Published: 2006-03-30

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N