Vulnerabilities > CVE-2006-1486 - Unspecified vulnerability in Fusionzone Realestatezone
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN fusionzone
exploit available
Summary
Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) bamin, (2) bemin, (3) pmin, and (4) state parameters.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | RealestateZONE 4.2 Multiple Cross-Site Scripting Vulnerabilities. CVE-2006-1486 . Webapps exploit for cfm platform |
| id | EDB-ID:27493 |
| last seen | 2016-02-03 |
| modified | 2006-03-28 |
| published | 2006-03-28 |
| reporter | r0t |
| source | https://www.exploit-db.com/download/27493/ |
| title | RealestateZONE 4.2 - Multiple Cross-Site Scripting Vulnerabilities |
References
- http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html
- http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html
- http://secunia.com/advisories/19429
- http://secunia.com/advisories/19429
- http://www.osvdb.org/24186
- http://www.osvdb.org/24186
- http://www.securityfocus.com/bid/17277
- http://www.securityfocus.com/bid/17277
- http://www.vupen.com/english/advisories/2006/1128
- http://www.vupen.com/english/advisories/2006/1128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25487
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25487