CVE-2006-2951

Description

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27123

http://www.vupen.com/english/advisories/2006/2233

http://www.securityfocus.com/bid/18383

http://www.securityfocus.com/archive/1/436442/100/0/threaded

http://www.osvdb.org/26296

http://www.osvdb.org/26295

http://www.osvdb.org/26294

http://www.osvdb.org/26293

http://www.osvdb.org/26292

http://securityreason.com/securityalert/1076

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS