CVE-2006-2367 | BDVDB-2026-16909 Detail

Description#

Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/892
http://soot.shabgard.org/bugs/Clansys.txt
http://securitytracker.com/id?1015934
http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/25783
http://secunia.com/advisories/19609

Exploit#

No public exploit known

History#

Version 12006-05-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.