CVE-2006-2986

Description

Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27095

http://www.vupen.com/english/advisories/2006/2238

http://www.securityfocus.com/bid/18350

http://www.securityfocus.com/archive/1/436411/100/0/threaded

http://securityreason.com/securityalert/1084

http://secunia.com/advisories/20533

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS