Vulnerabilities > CVE-2006-4822 - Cross-Site Scripting vulnerability in Emusoft EmuCMS

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

emusoft

NVD

Published: 2006-09-15

Updated: 2017-07-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters.

Vulnerable Configurations

Part	Description	Count
Application	Emusoft Emusoft Emucms *	1

References

http://secunia.com/advisories/21883
http://www.osvdb.org/28767
http://www.securityfocus.com/bid/20013
http://www.security-net.biz/adv/D13906a.txt
http://www.vupen.com/english/advisories/2006/3604
https://exchange.xforce.ibmcloud.com/vulnerabilities/28939