CVE-2006-2066 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-2066
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2066

Description: Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.

CVE Status: Candidate

References: ST 1015977 SREASON http://securityreason.com/securityalert/801 SAID Secunia Advisory: SA19786 OSVDB 24901 MISC http://www.nukedx.com/?viewdoc=26 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/447303/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/447195/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/431759/100/0/threaded BID 17651 20232

Return to the previous page.