Vulnerabilities > CVE-2006-2345 - Cross-Site Scripting vulnerability in Roostercode Ajax Softwares Alipager 1.5

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE

Summary

Cross-site scripting (XSS) vulnerability in inc/elementz.php in AliPAGER 1.5 allows remote attackers to inject arbitrary web script or HTML via the ubild parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. NOTE: this issue might be resultant from SQL injection.

Vulnerable Configurations

Part Description Count
Application
Roostercode_Ajax_Softwares
1