Vulnerabilities > CVE-2006-1373 - Cross-Site Scripting vulnerability in PHP Live PHP Live 2.8.1

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
php-live
exploit available
NVD
Published: 2006-03-24
Updated: 2018-10-18

Summary

Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter.

Vulnerable Configurations

Part Description Count
Application
Php_Live
2

Exploit-Db

descriptionPHP Live! 3.0 Status_Image.PHP Cross-Site Scripting Vulnerability. CVE-2006-1373. Webapps exploit for php platform
idEDB-ID:27453
last seen2016-02-03
modified2006-03-22
published2006-03-22
reporterkspecial
sourcehttps://www.exploit-db.com/download/27453/
titlePHP Live! 3.0 Status_Image.PHP Cross-Site Scripting Vulnerability

References