Vulnerabilities > CVE-2006-2252 - HTML Injection vulnerability in Openfaq 0.4.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | OpenFAQ 0.4 Validate.PHP HTML Injection Vulnerability. CVE-2006-2252. Webapps exploit for php platform |
id | EDB-ID:27821 |
last seen | 2016-02-03 |
modified | 2006-05-06 |
published | 2006-05-06 |
reporter | Kamil Sienicki |
source | https://www.exploit-db.com/download/27821/ |
title | OpenFAQ 0.4 Validate.PHP HTML Injection Vulnerability |
References
- http://secunia.com/advisories/20018
- http://securityreason.com/securityalert/850
- http://www.osvdb.org/25350
- http://www.securityfocus.com/archive/1/433120/100/0/threaded
- http://www.securityfocus.com/bid/17860
- http://www.vupen.com/english/advisories/2006/1684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26286