Vulnerabilities > CVE-2006-4751 - Cross-Site Scripting vulnerability in Laurentiu Matei Expandable Home Page CMS 0.5.1
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | XHP CMS 0.5.1 Index.PHP Cross-Site Scripting Vulnerability. CVE-2006-4751. Webapps exploit for php platform |
| id | EDB-ID:28509 |
| last seen | 2016-02-03 |
| modified | 2006-09-11 |
| published | 2006-09-11 |
| reporter | HACKERS PAL |
| source | https://www.exploit-db.com/download/28509/ |
| title | XHP CMS 0.5.1 Index.PHP Cross-Site Scripting Vulnerability |
References
- http://secunia.com/advisories/21877
- http://securityreason.com/securityalert/1565
- http://securitytracker.com/id?1016823
- http://www.securityfocus.com/archive/1/445727/100/0/threaded
- http://www.securityfocus.com/bid/19948
- http://www.vupen.com/english/advisories/2006/3560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28860