CVE-2006-1496 | BDVDB-2026-15942 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/25483
http://www.attrition.org/pipermail/vim/2006-March/000651.html
http://www.securityfocus.com/archive/1/428737
http://www.attrition.org/pipermail/vim/2006-March/000650.html
http://secunia.com/advisories/19403
http://www.securityfocus.com/bid/17226

Exploit#

No public exploit known

History#

Version 12006-03-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.