CVE-2006-1417 | BDVDB-2026-15902 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2006/1091
http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html
http://secunia.com/advisories/19416
http://www.securityfocus.com/bid/17255
https://exchange.xforce.ibmcloud.com/vulnerabilities/25431
http://www.osvdb.org/24129
http://www.osvdb.org/24130

Exploit#

No public exploit known

History#

Version 12006-03-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.