|
|
CVE Reference: CVE-2006-2951 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-2951 |
|
|
Description: Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/27123 SREASON http://securityreason.com/securityalert/1076 SAID Secunia Advisory: SA20523 OSVDB 26293 26296 26292 26294 26295 MISC http://www.acid-root.new.fr/advisories/npds510.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/436442/100/0/threaded BID 18383 |
|
| Return to the previous page. |
