Vulnerabilities > CVE-2006-0465 - Cross-Site Scripting vulnerability in Site Manager

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

active121

NVD

Published: 2006-01-27

Updated: 2008-09-05

Summary

Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter.

Vulnerable Configurations

Part	Description	Count
Application	Active121 Active121 Site Manager *	1

References

http://osvdb.org/ref/22/22715-active121.txt
http://www.osvdb.org/22715