CVE-2006-2066

Description

Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.

References

http://www.vupen.com/english/advisories/2006/1485

http://www.securityfocus.com/bid/20232

http://www.securityfocus.com/bid/17651

http://www.securityfocus.com/archive/1/447303/100/0/threaded

http://www.securityfocus.com/archive/1/447195/100/0/threaded

http://www.securityfocus.com/archive/1/431759/100/0/threaded

http://www.osvdb.org/24901

http://securityreason.com/securityalert/801

http://secunia.com/advisories/19786

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS