Vulnerabilities > CVE-2006-4069 - Input Validation vulnerability in Ozjournals 1.5

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
ozjournals
NVD
Published: 2006-08-10
Updated: 2018-10-17

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) m and (2) c parameters in index.php, (3) a search action, and (4) a "submit comment" action.

Vulnerable Configurations

Part Description Count
Application
Ozjournals
1

References