Vulnerabilities > CVE-2006-3131 - Input Validation vulnerability in Clubpage

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
clubpage
NVD
Published: 2006-06-22
Updated: 2017-07-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the (1) news_archive, (2) language, and (3) intranetLogin parameters in (a) index.php; the (4) sites_id parameter in (b) sites.php; and the (5) news_id parameter in (c) news_more.php.

Vulnerable Configurations

Part Description Count
Application
Clubpage
1

References