CVE-2006-2956 | BDVDB-2026-17472 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchword parameter to search.php or (2) siteurl parameter to add.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/20547
http://securitytracker.com/id?1016274
http://www.vupen.com/english/advisories/2006/2252
http://www.securityfocus.com/bid/18355
http://www.majorsecurity.de/advisory/major_rls10.txt

Exploit#

No public exploit known

History#

Version 12006-06-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.