Vulnerabilities > CVE-2006-4324 - Cross-Site Scripting vulnerability in Cityforfree Indexcity 1.0

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

cityforfree

NVD

Published: 2006-08-24

Updated: 2018-10-17

Summary

Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Vulnerable Configurations

Part	Description	Count
Application	Cityforfree Cityforfree Indexcity 1.0	1

Packetstorm

data source	https://packetstormsecurity.com/files/download/49994/EV0135.txt
id	PACKETSTORM:49994
last seen	2016-12-05
published	2006-09-14
reporter	Aliaksandr Hartsuyeu
source	https://packetstormsecurity.com/files/49994/EV0135.txt.html
title	EV0135.txt

References

http://evuln.com/vulns/135/description.html
http://secunia.com/advisories/21565
http://www.osvdb.org/28070
http://www.securityfocus.com/archive/1/445907/100/0/threaded
http://www.securityfocus.com/bid/19652
https://exchange.xforce.ibmcloud.com/vulnerabilities/28509