Vulnerabilities > CVE-2006-3558 - Input Validation vulnerability in Arif Supriyanto Auracms 1.62

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
arif-supriyanto
NVD
Published: 2006-07-13
Updated: 2018-10-18

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judul_artikel parameter in teman.php and (2) the title of an article sent to admin, which is displayed when unauthenticated users visit index.php.

Vulnerable Configurations

Part Description Count
Application
Arif_Supriyanto
1

References