|
|
CVE Reference: CVE-2006-2066 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-2066 |
|
|
Description: Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters. |
|
|
CVE Status: Candidate |
|
|
References: ST 1015977 SREASON http://securityreason.com/securityalert/801 SAID Secunia Advisory: SA19786 OSVDB 24901 MISC http://www.nukedx.com/?viewdoc=26 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/447303/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/447195/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/431759/100/0/threaded BID 17651 20232 |
|
| Return to the previous page. |
