CVE-2006-3051

Summary

Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.majorsecurity.de/advisory/major_rls17.txt
• http://secunia.com/advisories/20655
• http://securitytracker.com/id?1016282
• http://www.securityfocus.com/archive/1/437639/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27108
• http://www.securityfocus.com/bid/18393
• http://securityreason.com/securityalert/1101
• http://www.securityfocus.com/archive/1/437047/100/0/threaded
• http://www.vupen.com/english/advisories/2006/2386

References

• http://www.majorsecurity.de/advisory/major_rls17.txt
• http://secunia.com/advisories/20655
• http://securitytracker.com/id?1016282
• http://www.securityfocus.com/archive/1/437639/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27108
• http://www.securityfocus.com/bid/18393
• http://securityreason.com/securityalert/1101
• http://www.securityfocus.com/archive/1/437047/100/0/threaded
• http://www.vupen.com/english/advisories/2006/2386

• ←Previous
• Next→