CVE-2006-1504

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in (1) online.php and (2) download.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/17285
• http://securityreason.com/securityalert/673
• http://www.vupen.com/english/advisories/2006/1150
• http://www.osvdb.org/24220
• http://secunia.com/advisories/19445
• http://www.osvdb.org/24221
• http://www.securityfocus.com/archive/1/429109/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25515

References

• http://www.securityfocus.com/bid/17285
• http://securityreason.com/securityalert/673
• http://www.vupen.com/english/advisories/2006/1150
• http://www.osvdb.org/24220
• http://secunia.com/advisories/19445
• http://www.osvdb.org/24221
• http://www.securityfocus.com/archive/1/429109/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25515

• ←Previous
• Next→